ClauseKit

Privacy Policy

We do not sell your data
Effective Date: January 1, 2025Last Updated: January 1, 2025

ModelRed, Inc. ("ModelRed," "we," "us," or "our") operates ClauseKit, an AI-powered contract analysis platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

Your Privacy Matters

Your privacy is important to us. We are committed to protecting your personal information and your right to privacy.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide when using ClauseKit:

  • Account Information: Name, email address, password, company name
  • Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
  • Profile Information: Optional profile photo, job title, preferences
  • Contracts and Documents: Any contracts, legal documents, or files you upload for analysis
  • Communications: Messages, feedback, and support requests you send us

1.2 Information Collected Automatically

When you use ClauseKit, we automatically collect:

  • Usage Data: Pages visited, features used, time spent, clicks, analysis history
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, error logs, performance data
  • Cookies and Similar Technologies: See Section 6 below

1.3 Information from Third Parties

  • Authentication Services: If you sign up using Google, GitHub, or other OAuth providers
  • Payment Processors: Transaction confirmations from Stripe or other payment services

2. How We Use Your Information

We use your information for the following purposes:

2.1 To Provide and Improve the Service

  • Process and analyze your uploaded contracts
  • Generate risk assessments, clause identifications, and redline suggestions
  • Provide contract Q&A and scenario simulations
  • Store your analysis history and documents
  • Improve our AI models and algorithms (using anonymized data only)

2.2 To Manage Your Account

  • Create and maintain your account
  • Process payments and subscriptions
  • Send service-related communications
  • Provide customer support

2.3 To Communicate With You

  • Respond to inquiries and support requests
  • Send important updates about the Service
  • Send marketing communications (with your consent, which you can withdraw at any time)
  • Notify you of new features or changes

2.4 For Security and Legal Compliance

  • Detect and prevent fraud, abuse, and security incidents
  • Enforce our Terms of Service
  • Comply with legal obligations
  • Protect our rights and the rights of others

3. How We Share Your Information

We do NOT sell your personal information or your uploaded contracts to third parties.

We may share your information only in the following circumstances:

3.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the Service:

  • Cloud Hosting: AWS, Google Cloud, or similar providers for data storage
  • Payment Processing: Stripe or similar payment processors
  • AI Services: OpenAI, Anthropic, or similar AI providers for contract analysis
  • Analytics: Google Analytics or similar tools for usage analytics
  • Email Services: SendGrid, Resend, or similar for transactional emails

All service providers are contractually obligated to protect your data and use it only for specified purposes.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Valid legal requests (subpoenas, court orders)
  • Government investigations
  • Protection of our legal rights
  • Prevention of fraud or security threats

3.3 Business Transfers

If ModelRed, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

3.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4. Data Security

4.1 Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
  • Access Controls: Strict access controls and authentication requirements
  • Regular Audits: Security audits and vulnerability assessments
  • Secure Infrastructure: Cloud infrastructure with built-in security features
  • Data Isolation: Your contracts are stored separately and not accessible by other users

4.2 No Guarantee

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

5.1 Active Accounts

  • We retain your account information and uploaded contracts for as long as your account is active
  • Analysis results and history are retained to provide the Service to you

5.2 Account Deletion

  • You may request deletion of your account and all associated data at any time
  • Upon deletion request, we will delete your data within 30 days
  • Some information may be retained in backups for up to 90 days
  • We may retain certain data longer if required by law or for legitimate business purposes

5.3 Anonymized Data

We may retain anonymized, aggregated data indefinitely for research, analytics, and service improvement purposes.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

  • Essential Cookies: Required for the Service to function (authentication, security)
  • Analytics Cookies: Help us understand how users interact with the Service
  • Preference Cookies: Remember your settings and preferences

6.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 General Rights

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Data Portability: Request your data in a machine-readable format
  • Opt-Out: Opt out of marketing communications

7.2 GDPR Rights (EEA Users)

If you are in the European Economic Area, you have additional rights under GDPR:

  • Right to object to processing
  • Right to restrict processing
  • Right to lodge a complaint with a supervisory authority
  • Right to withdraw consent at any time

7.3 CCPA Rights (California Users)

If you are a California resident, you have rights under CCPA:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (we do not sell your information)
  • Right to deletion
  • Right to non-discrimination for exercising your rights

7.4 Exercising Your Rights

To exercise any of these rights, contact us at privacy@clausekit.ai or through your account settings.

8. International Data Transfers

ClauseKit is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

9. Children's Privacy

ClauseKit is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

10. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of third parties.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the "Last Updated" date
  • Sending an email notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

ModelRed, Inc.
ClauseKit Privacy Team
Email: privacy@clausekit.ai

This Privacy Policy was last updated on January 1, 2025. We encourage you to review this policy periodically to stay informed about how we protect your information.