Privacy Policy

Last updated: March 2026

ClauseGuard Ltd ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using ClaudeGuard, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

1. What Information We Collect

We collect information you provide directly to us, including:

• Account Registration: Email address, full name, firm name, FCA Firm Reference Number (FRN), and firm permissions information
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• Communications: Messages, inquiries, and feedback you send us
• Technical Data: IP address, browser type, device information, and usage analytics (via log files)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing, maintaining, and improving our regulatory intelligence service
• Processing and managing your account and subscription
• Sending transactional emails (order confirmations, payment receipts, service updates) via Resend
• Providing customer support and responding to your inquiries
• Monitoring and analysing service usage to prevent fraud and maintain security
• Personalising regulatory updates based on your firm’s specific permissions and FRN
• Complying with legal obligations and enforcing our Terms of Service

3. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract: Processing necessary to perform our services and fulfil your subscription
• Legitimate Interests: Improving service quality, preventing fraud, and maintaining security
• Consent: Marketing communications (which you can withdraw at any time)
• Legal Obligation: Complying with regulatory or legal requirements

4. How We Share Your Information

We do not sell your personal data. However, we may share your information with carefully selected service providers:

• Stripe: Payment processing and billing (PCI-DSS compliant)
• Resend: Transactional email delivery
• Anthropic Claude: AI-powered regulatory classification and analysis
• Vercel: Application hosting and content delivery
• Neon: Database hosting and management
• Legal Requirements: As required by law, court orders, or government requests

All third-party service providers are contractually bound to handle your data securely and in accordance with UK GDPR and applicable data protection laws.

5. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfil the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained while your account is active and for 12 months after termination
• Payment Data: Retained for 7 years for tax and accounting purposes
• Technical Logs: Retained for up to 90 days for security and debugging purposes

You may request deletion of your data subject to legal and contractual retention obligations.

6. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing for legitimate interests or marketing
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at hello@clauseguard.uk. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. These include:

• Essential Cookies: Necessary for authentication and security
• Analytics Cookies: Help us understand usage patterns and improve our service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. However, disabling essential cookies may affect the functionality of our service.

8. Data Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS/SSL), secure authentication, and restricted access controls. However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries other than the UK. Where we transfer data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions. By using our services, you consent to such transfers.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

ClauseGuard Ltd
Email: hello@clauseguard.uk
Jurisdiction: England and Wales

If you believe we have violated your rights under UK GDPR, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.