Privacy Policy

Effective as of October 2, 2026.

California Notice at Collection / State Privacy Rights Notice: See the State privacy rights notice section below for information about your rights under applicable state privacy laws.

ClauseAI ("ClauseAI," "we," "us," or "our") provides a service that generates startup legal documents from attorney-drafted templates. You can download PDF, Word, ODT, or Markdown through the website, a JSON API, an MCP server, or an agent skill. No account is required. This Privacy Policy describes how ClauseAI processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (collectively, the "Service").

Your use of the Service is also subject to our Terms of Use.

Personal information we collect

Information you provide to us

Personal information you may provide to us through the Service includes:

1. Contact data, such as an email address, if you choose to include one when you generate a document.
2. Document inputs, such as the text you type into a template. That text is used to fill the document and may include names, addresses, emails, or other details you choose to enter.
3. Communications data, if you email us about the Service or send feedback through the feedback endpoint or the MCP feedback tool. Feedback includes the message, a category, the template it concerns if you name one, and your email address if you provide one.

We do not ask you to create an account, and we do not collect payment card data, government identification numbers, or precise geolocation.

Automatic data collection

We automatically log information about your requests to the Service:

1. Device and request data, such as your IP address, user agent, the page or API path you request, the time of the request, and the HTTP status of the response. When an MCP client opens a session, we also log the client name and version that client declared.
2. Generation records, when you generate a document. A generation record includes the template, format, the answers you submitted, your IP address, your user agent, and your email address if you provided one. A generation through the MCP server records those same fields, labels the source as MCP, and also records the client name and version the caller declared in the MCP handshake, and the Origin header when the caller sends one. If a request to generate a document is rejected, we log the template, the names of the fields that were rejected and why, and the same caller details, but not the answers.
3. Feedback records, when you or your agent send feedback. A feedback record includes the feedback described above, your IP address, your user agent, and, for feedback sent through the MCP server, the client name and version the caller declared and the Origin header when the caller sends one.

The website loads scripts from the Tailwind CSS CDN (cdn.tailwindcss.com) and jsDelivr (cdn.jsdelivr.net). Your browser sends those providers your IP address and ordinary request headers. Their own privacy policies govern that collection.

We do not use personal information to train AI models, and the Service does not include a chatbot. If you use your own agent to call the API or MCP server, that agent handles your information under its own terms.

How we use your personal information

We use personal information for the following purposes:

Service delivery and operations

We use personal information to provide the Service, generate the document you request, return that document to you, keep an operational record of the generation, and respond to questions you send us.

Security and debugging

We use request logs to operate, secure, and debug the Service, and to prevent, identify, and investigate fraudulent, harmful, or unauthorized activity.

Compliance and protection

We may use personal information to comply with law, lawful requests, and legal process; to protect the rights, privacy, safety, or property of ClauseAI, you, or others; to enforce these terms and the Terms of Use; and to audit our processes for compliance with legal requirements.

Aggregated or de-identified data

We may create aggregated, de-identified, or anonymized data from personal information by removing information that makes the data identifiable to you, and we will not attempt to reidentify that data except to test whether our de-identification process complies with law. We may use that data to analyze and improve the Service.

We do not use personal information for targeted advertising. We do not use personal information to engage in profiling or automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.

How we share your personal information

We share personal information with the following parties:

Service providers. Hosting and logging providers that operate the Service. If an operations webhook is configured, we also send the generation record (template, format, answers, optional email, IP address, user agent, and, for MCP generations, the declared client name and version and the Origin header when the caller sends one) to Slack. We send feedback records to Slack in the same way.

Content-delivery networks. Tailwind CSS CDN and jsDelivr receive the technical data your browser sends when it loads page scripts.

Professional advisors. Lawyers, auditors, bankers, and insurers, where they need the information to provide professional services to us.

Authorities and others. Law enforcement, government authorities, and private parties, when we believe in good faith that disclosure is necessary for the compliance and protection purposes described above.

Business transferees. An acquirer, successor, or assignee, if we sell, transfer, or merge all or part of the Service, or in an insolvency, bankruptcy, or receivership in which personal information is transferred as a business asset.

We do not sell your Personal Information within the meaning of State Privacy Laws. We do not share personal information for cross-context behavioral advertising. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16 years of age. We do not intentionally collect or process Sensitive Personal Information.

Cookies and other technologies

We do not use cookies, pixels, or similar technologies for advertising, analytics, or accounts. We do not use Google Analytics or a session-recording tool. Your choices about cookies are controlled in your browser. Some browsers send a "Do Not Track" signal. We do not respond to "Do Not Track" signals. Because we do not sell or share personal information, a browser opt-out preference signal does not change a sale or share.

Retention

We keep personal information only as long as we need it for the purposes above, including security, debugging, and legal claims. Access logs and generation logs are stored in rotating log files. A log file rotates at about 10 MB, and we keep 10 rotated files. We do not keep a user-account database. The generated file is returned in the download or API response. We do not keep a separate archive of that file beyond the generation log.

Your choices

You can use the Service without providing an email address. If you do not want a generation record to include particular details, do not type those details into the template.

Residents of U.S. states with applicable privacy laws can find additional rights below. To make a request, email wferrell@gmail.com. We may not be able to process a request if you do not give us enough detail to find the relevant generation record, such as the email you submitted and the approximate time of the request.

Security

We use technical and organizational safeguards designed to protect the personal information we collect. Security risk is inherent in internet transmission and storage, and we cannot guarantee the security of your personal information.

International data transfer

We are based in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

Children

The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

Changes to this Privacy Policy

We may modify this Privacy Policy at any time. If we make material changes, we will update the effective date and post the new policy on the Service. Your use of the Service after the effective date means the modified Privacy Policy applies to that use.

How to contact us

Email wferrell@gmail.com.

State privacy rights notice

Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the "State Privacy Laws").

This section describes how we collect, use, and share Personal Information of residents of these states and the rights these users may have with respect to their Personal Information. Please note that not all rights listed below may be afforded to all users and that if you are not a resident of one of these states, you may not be able to exercise these rights. We may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.

For purposes of this section, the term "Personal Information" has the meaning given to "personal data," "personal information," or similar terms, and "Sensitive Personal Information" has the meaning given to "sensitive personal information," "sensitive data," or similar terms, in the State Privacy Laws. Those terms do not include information exempted from the State Privacy Laws.

Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. These rights are not absolute, and some State Privacy Laws do not provide every right to their residents. We may decline a request in cases permitted by law.

Information. You can request the following information about how we have collected and used your Personal Information:

• The categories of Personal Information that we have collected.
• The categories of sources from which we collected Personal Information.
• The business or commercial purpose for collecting Personal Information.
• The categories of third parties with which we share Personal Information.
• The categories of Personal Information that we disclosed for a business purpose, and the categories of third parties to whom it was disclosed.

Access. You can request a copy of the Personal Information that we have collected about you.

Appeal. You can appeal our denial of a request you validly submitted.

Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.

Deletion. You can ask us to delete the Personal Information that we have collected from you.

Opt-out of certain processing for targeted advertising purposes. We do not process your personal information for targeted advertising purposes.

Opt-out of or appeal profiling or automated decision-making. We do not use your Personal Information to engage in profiling or to perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.

Opt-out of sales of personal data. We do not sell your Personal Information within the meaning of State Privacy Laws.

Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16 years of age.

Sensitive Personal Information. We do not intentionally collect or process Sensitive Personal Information.

Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

How to submit a request. Email wferrell@gmail.com. We do not sell or share Personal Information, so there is no separate sale or sharing opt-out to turn off.

Verification of identity; authorized agents. We may need to verify your identity in order to process an access, appeal, correction, or deletion request, and we may confirm your residency. To verify your identity, we may ask for information that matches a generation record, such as the email address you submitted and the approximate time of the request, or other information permitted by law.

Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. We may need to verify your authorized agent's identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized.

Information practices. The following describes our practices currently and during the past 12 months.

Sources and purposes. We collect the categories of personal information below from you and from your requests to the Service, and we use them for the purposes described in this Privacy Policy.

Retention. We retain personal information for the period described in the Retention section above.

Deidentification. We do not attempt to reidentify deidentified information derived from personal information, except to test whether our deidentification processes comply with applicable law.

Personal information that we collect, use, and disclose. The chart below describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. It refers to the categories in this Privacy Policy and to the categories of Personal Information specified in the CCPA (Cal. Civ. Code §1798.140). Information you voluntarily type into a template may contain other details you choose to include.

Additional information for California residents.

Shine the Light law. Under California's Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family, or household purposes to provide the names of third parties to which they have disclosed certain personal information during the preceding calendar year for those third parties' own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information at wferrell@gmail.com. In your request, include the statement "Shine the Light Request," provide your first and last name and mailing address, and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. We are not responsible for notices that are not labeled or sent properly, or that do not have complete information. We do not disclose personal information to third parties for their own direct marketing purposes.

Additional information for Nevada residents. Nevada residents have the right to opt out of the sale of certain personal information for monetary consideration. We do not sell personal information for monetary consideration. If you are a Nevada resident and would like to make a request, email wferrell@gmail.com.

Additional information for Texas residents. We do not sell sensitive personal data.

Contact us. If you have questions or concerns about our privacy policies or information practices, email wferrell@gmail.com.

This template was prepared and made publicly available by General Legal, PC ("General Legal"). It is provided for general reference purposes only and does not constitute, and should not be construed as, legal advice, or an endorsement or review of any particular transaction in which it is used. Use of this template does not create an attorney-client relationship with General Legal. General Legal has not reviewed, and takes no position on, any modifications made to this document or the deal terms it is used to document.