1. Who We Are

Clavico (getclavico.com) is a commercial contract intelligence platform operated as an individual business. Contact: [email protected]

2. What We Collect

Information you provide

• First name and email address (entered on the scan form)
• Contract document text (uploaded for analysis)
• Marketing consent preference

Information collected automatically

• IP address and browser type (via Cloudflare)
• Pages visited and time of visit — Clavico does not use tracking cookies or third-party analytics
• Device information

3. Subscription and Contract Data

Subscription information

If you subscribe to a Clavico plan, we collect and store your subscription tier (e.g. Starter, Professional), billing interval (monthly or annual), and subscription status. Payment method information — such as card type and last four digits — is held by Stripe on our behalf. Clavico does not store full card numbers, CVCs, or bank account details at any point.

Contract documents

When you upload a contract for scanning, the document text is transmitted to our AI processing provider (Anthropic) solely to generate your commercial intelligence report. Contracts are not stored permanently: contract text is held securely on our servers for a maximum of 90 days from the date of upload, after which it is permanently and automatically deleted. We do not use your uploaded contracts to train AI models.

Portfolio data

If you use the Portfolio feature, Clavico stores the scan results and associated metadata — including contract name, renewal dates, contract value, and risk scores — linked to your account. This data is retained for as long as your account is active. You may request deletion at any time by emailing [email protected].

Payments

All payment processing is handled by Stripe, Inc. Clavico never sees or stores your full card number, CVC, or bank account information. Stripe's privacy policy is available at stripe.com/privacy.

Data deletion

You may request deletion of your account and all associated data (scan results, portfolio entries, email address, and name) at any time by emailing [email protected]. We will process deletion requests within 30 days. Payment transaction records may be retained for up to 7 years as required by applicable law.

Cold email

If you received a cold outreach email from Clavico, your business contact details were sourced from public business registries and publicly available professional information. You can unsubscribe at any time using the unsubscribe link included in every email. We will not contact you again after you unsubscribe.

4. How We Use Your Information

• To deliver your contract analysis report
• To send your report by email
• To send product updates and contract intelligence content (only with your consent)
• To maintain platform security and prevent fraud

5. Contract Document Processing

6. Who We Share Your Data With

We share data only with service providers who help us deliver the service:

• Anthropic — AI analysis (contract text processed to generate your report)
• Hetzner — Hosting and data storage (EU datacenter, Germany)
• Stripe — Payment processing (we never see your card details)
• Brevo — Email delivery (receives your email address to send reports)
• IPinfo — IP geolocation (receives visitor IP addresses to identify the organisation behind a site visit, used for lead analytics)
• Cloudflare — CDN and security (processes IP addresses)

We never sell your personal data. We never share it for marketing purposes.

7. Legal Bases for Processing (GDPR)

• Performance of a contract — processing your scan to deliver the report you paid for
• Consent — sending marketing emails (only if you opted in)
• Legitimate interests — platform security and service improvement

8. How Long We Keep Your Data

• Contract text and scan reports: automatically deleted after 90 days
• Email address and name: retained until you request deletion
• Payment records: retained as required by law (typically 7 years)

9. International Transfers

Your data may be transferred to and processed in the United States (Anthropic, Stripe) and the European Union (Hetzner). These transfers are made under Standard Contractual Clauses in accordance with GDPR requirements.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent to marketing at any time
• Lodge a complaint with your national data protection authority. EU residents may contact our lead supervisory authority: the Irish Data Protection Commission (DPC) at dataprotection.ie

To exercise any of these rights, email [email protected]. We will respond within 30 days.

11. Security

Contract data is encrypted at rest using AES-256 (pgcrypto). All data is protected by HTTPS in transit, security headers, isolated database access, and regular security updates. Contract text is never stored in plain form.

Anthropic's API, which processes your contract for analysis, operates under commercial terms that prohibit training on customer data.

If you have security concerns, contact [email protected] immediately.

12. Cookies

Clavico does not use tracking cookies and no third-party analytics tools are currently deployed on this site. If this changes, this policy will be updated and a consent mechanism added before any such tool goes live.

13. Children

Clavico is not directed at children under 18. We do not knowingly collect data from minors.

14. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be communicated by email.

15. Contact

Questions about this policy or your data:
Email: [email protected]