ClearClause

Privacy Policy

Last updated: February 2026

1. Introduction

ClearClause is an AI-powered contract analysis tool that generates plain-English summaries and risk assessments from uploaded or pasted contract text. The service is operated by Tohu Bohu. By using ClearClause, you agree to the data practices described in this Privacy Policy.

We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

2. What We Collect

We distinguish between transient data (processed temporarily and discarded) and persistent data (retained after your session ends):

Transient Data (never stored at rest)

  • Contract text or PDF files you submit for analysis — these are processed in server memory and discarded immediately after the analysis response is returned to your browser. They are never written to disk or a database.

Persistent Data (retained for operational purposes)

  • IP addresses — logged by our hosting infrastructure (Vercel) for security monitoring and abuse prevention.
  • Payment information — if you purchase a paid tier, your payment is processed entirely by Razorpay. We never see or store your card numbers, UPI details, or banking information. We receive only confirmation of payment status from Razorpay.
  • Basic request metadata — timestamps and request sizes are used for rate limiting and service abuse prevention.

3. What We Do NOT Collect

We do not collect, store, or process:

  • User accounts or account credentials
  • Email addresses (unless provided during Razorpay checkout)
  • Contract content stored at rest or in a database
  • Personal information extracted from your contracts
  • Browsing history or behavioral tracking data
  • Device fingerprints or persistent identifiers

4. Zero-Persistence Model

ClearClause is built on a zero-persistence model for contract content. This means:

  • Contracts you upload or paste are never written to disk or stored in a database — by us or on our servers.
  • Analysis runs in ephemeral server memory that is released immediately after the result is streamed to your browser.
  • There are no backups, logs, or retained copies of your contract content on our infrastructure.
  • Once the analysis response is delivered to your browser, the server state is released and your contract text is gone.

Note: Contract text is transmitted to Anthropic's Claude API for AI analysis (see Section 5). Anthropic's own data retention policies apply to that transmission.

5. Third-Party Services

We use the following third-party services to operate ClearClause:

Anthropic (Claude AI)

Your contract text is transmitted to Anthropic's API servers for AI analysis. This transmission occurs over an encrypted connection. Anthropic's data retention and privacy policies apply to data processed through their API. ClearClause does not receive or retain any data about you from Anthropic beyond the analysis result itself. See Anthropic's Privacy Policy.

Razorpay (Payment Processing)

Payment processing for paid tiers is handled entirely by Razorpay. Razorpay is PCI-DSS Level 1 compliant and collects and processes your payment details (card, UPI, net banking) in accordance with their own privacy policy. ClearClause receives only a confirmation of payment status — we never see or store your card numbers, UPI details, or banking information. See Razorpay's Privacy Policy.

Vercel (Hosting Platform)

ClearClause is hosted on Vercel. Vercel's infrastructure automatically collects standard server access logs including IP addresses and request timestamps. This data is subject to Vercel's privacy policy. See Vercel's Privacy Policy.

Plausible Analytics

We use Plausible Analytics, a privacy-first, cookie-free analytics service, to understand aggregate site usage (page views, referral sources). Plausible does not collect personal information, does not use cookies, and is fully GDPR-compliant. See Plausible's Data Policy.

Sentry (Error Monitoring)

We use Sentry for error monitoring to maintain service reliability. Sentry receives error reports that may include technical information such as browser type and stack traces. Contract text is explicitly excluded from error reports. See Sentry's Privacy Policy.

Resend (Transactional Email)

We use Resend to send transactional emails such as payment confirmations. Email addresses used for payment are shared with Resend solely for delivery purposes. See Resend's Privacy Policy.

6. Your Rights Under GDPR (EEA Users)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access — the right to request a copy of personal data we hold about you.
  • Right to rectification — the right to correct inaccurate personal data.
  • Right to erasure — the right to request deletion of your personal data.
  • Right to data portability — the right to receive your data in a machine-readable format.
  • Right to object — the right to object to certain processing of your personal data.
  • Right to restriction — the right to request that we restrict processing of your personal data.

Due to our zero-persistence model, most of these rights are satisfied by design — we do not store your contract content or personal information at rest, so there is nothing to access, rectify, or delete. For any privacy concerns, contact us at support@tohubohu.app.

7. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to know — the right to know what personal information we collect, use, and disclose.
  • Right to delete — the right to request deletion of personal information we have collected.
  • Right to opt out of sale — the right to opt out of the sale of your personal information.

We do not sell your personal information. Due to our zero-persistence model, deletion requests are satisfied by design — we do not retain your contract content after analysis. For any CCPA requests, contact us at support@tohubohu.app.

8. Cookies and Analytics

We do not use analytics cookies or tracking pixels. No third-party analytics scripts (such as Google Analytics) are loaded on ClearClause pages.

The hosting platform (Vercel) may set essential cookies for security and infrastructure purposes. Razorpay may set strictly necessary cookies for payment processing, which are exempt from consent requirements. These are necessary for the service to function and are not used for advertising or behavioral tracking.

9. Children's Privacy

ClearClause is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe that a child has used ClearClause, please contact us at support@tohubohu.app and we will take appropriate action.

10. Contact Us

For privacy-related questions, requests, or concerns, please contact us:

Email: support@tohubohu.app

You can also reach us via our Contact page.