Privacy Policy

How Clause AI handles personal information.

Clause AI processes contracts, profile details, payment metadata, and collaboration records in the course of running the product.

Because this is a legal workflow product, this policy is written to reflect the actual data paths inside the app, including document uploads, AI processing, exports, and payments.

Last updated 12 March 2026Clause AIinfo@clauseai.co.za

POPIA-aware

This policy is framed for a South African legal-tech product and references lawful-processing expectations under POPIA.

AI processing

Documents and prompts may be processed by third-party AI providers when you use drafting, editing, or analysis features.

Your control

You decide what to upload, who to collaborate with, and whether Clause AI is appropriate for the information involved.

1. Scope

This Privacy Policy explains how Clause AI collects, uses, stores, shares, and protects personal information when you visit clauseai.co.za, create an account, purchase access, upload or generate documents, invite collaborators, or otherwise use the Clause AI website and web application.

This policy applies to information processed through our own services. It does not apply to third-party websites, payment pages, or service providers that operate under their own terms, notices, and compliance obligations.

2. Information We Collect

Depending on how you use the service, we may collect the following categories of information:

  • Account and profile information, such as your name, email address, login credentials handled through our authentication providers, business name, business address, company logo, onboarding responses, and contact-permission preferences.
  • Document and workspace information, such as uploaded files, contract text, drafted clauses, front matter, definitions, saved drafts, signature block entries, export metadata, and collaboration records.
  • Billing and transaction information, such as plan selections, subscription status, Paystack customer and transaction references, payment confirmations, and related support records.
  • Collaboration information, such as collaborator email addresses, invitation status, invite timestamps, and accepted shared-draft access records.
  • Technical and usage information, such as browser and device data, IP-related logs, timestamps, authentication events, error data, and local browser storage used for sessions and temporary draft handoff.
  • Communications and feedback, such as emails you send us, product feedback, support requests, and responses to service notices.

3. How We Use Information

We use personal information to operate, secure, support, and improve Clause AI. This includes providing access to your account, generating and editing documents, saving drafts, enabling collaboration, exporting files, managing billing, responding to support requests, investigating misuse, and complying with legal obligations.

We may also use information to communicate service updates, trial or billing status, security notifications, and product changes. Where you have opted in, we may contact you about relevant Clause AI updates or commercial information.

4. Lawful Grounds for Processing

Where South African privacy law applies, we process personal information on lawful grounds that can include performing our contract with you, taking steps at your request before providing the service, complying with legal obligations, pursuing legitimate interests in running and securing the platform, and relying on consent where consent is appropriate.

If we rely on your consent for a specific activity, you may withdraw that consent going forward. Withdrawal does not affect earlier processing that was lawful when carried out.

5. AI Processing

Clause AI uses third-party AI services to analyse documents, answer drafting questions, and suggest edits. That means document content, prompts, and related context may be transmitted to those providers to return the requested output.

Clause AI processes the document context needed to return drafting, editing, and analysis results. If your matter involves heightened confidentiality or regulated data, assess carefully whether hosted third-party AI processing is appropriate before uploading it.

You should only submit information you are authorised to share, and you should avoid uploading special personal information, highly regulated data, or third-party confidential material unless you have a clear lawful basis and adequate protections in place.

6. When We Share Information

We do not sell personal information. We may share information only where needed to operate the service, fulfil your instructions, or comply with law.

  • With infrastructure, storage, and authentication providers, including Supabase, to run accounts, databases, file storage, and collaboration features.
  • With AI processing providers, including OpenAI, when you use document analysis, drafting, chat, or editing features.
  • With payment providers, including Paystack, to process transactions, verify payments, and manage subscriptions.
  • With collaborators you invite or authorise to access a shared draft or workspace.
  • With professional advisers, auditors, insurers, or legal counsel where reasonably necessary.
  • With regulators, courts, law enforcement, or other third parties where required by law or where necessary to establish, exercise, or defend legal rights.
  • As part of a merger, acquisition, restructuring, financing, or asset transfer, subject to appropriate confidentiality and legal protections.

7. Cross-Border Processing

Some of our service providers may process information outside South Africa. Where cross-border transfers occur, we take steps intended to ensure the transfer happens on a lawful basis and under appropriate contractual, technical, or organisational safeguards.

By using Clause AI and submitting information for hosted storage or AI processing, you acknowledge that cross-border processing may occur where necessary to provide the service.

8. Retention

We keep personal information for as long as reasonably necessary for the purposes described in this policy, including to maintain your account, provide the service, preserve collaboration history, meet audit and compliance obligations, resolve disputes, and enforce our agreements.

Drafts and uploaded content may remain available until you delete them, your account is closed, or retention is no longer justified. Backups, logs, and archived records may persist for a limited period after deletion where required for resilience, fraud prevention, or legal compliance.

9. Security

We use reasonable administrative, technical, and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. These measures can include access controls, authentication safeguards, and controlled service-provider access.

No internet-based service is completely secure. You remain responsible for protecting your account credentials, using secure devices and networks, and limiting the information you choose to upload into the platform.

10. Your Rights

Subject to applicable law, you may have the right to request access to personal information we hold about you, ask that inaccurate information be corrected, request deletion or restriction in appropriate circumstances, object to certain processing, and withdraw consent where consent is the basis for processing.

You may also have the right to complain to the Information Regulator (South Africa) if you believe your personal information has been processed unlawfully. We encourage you to contact us first so we can try to resolve the issue directly.

11. Children

Clause AI is intended for adults and business users. The service is not directed to children, and you may not use it if you are under 18 years old.

12. Changes and Contact

We may update this Privacy Policy from time to time to reflect product, legal, operational, or security changes. The updated version will be posted on this page with a revised effective date.

If you have questions about this Privacy Policy or want to exercise a privacy right, contact us at info@clauseai.co.za.

Questions

For legal-document questions about the platform terms or privacy notice, contact info@clauseai.co.za.