Legal
Privacy Policy
Read the ClauseBorne privacy policy to understand what data we collect, how we use it, and the choices you have over your information.
Introduction & Scope
ClauseBorne provides workflow automation software for law firms. This Privacy Policy explains how we handle personal information when you:
- Visit clauseborne.ai and related websites
- Sign up for, book a demo of, or use the ClauseBorne platform
- Contact us or interact with our marketing, sales, or support teams
It applies to ClauseBorne's websites, products, and services (together, the "Services"). It does not apply to third-party sites or services we link to, which have their own policies.
Please also read Section 3, which explains how we treat the data law firms upload to the platform. That data is handled differently from the personal information we collect for our own purposes.
Information We Collect
Account and contact information
Name, work email, phone number, job title, password or authentication details, and communication preferences.
Firm and business information
Firm name, size, practice areas, billing contacts, seat and plan details, and other information about your organization.
Website usage and device information
IP address, browser and device type, operating system, pages viewed, referring URLs, and approximate location derived from IP address.
Support and communications
Messages you send us, demo requests, workflow preview requests, survey responses, call or meeting notes, and any files you choose to share with our team.
Cookies and analytics
We and our analytics providers use cookies and similar technologies to understand how the site is used. See Section 9.
Information from integrations
If your firm connects a third-party tool to ClauseBorne, we receive the information that integration is configured to share.
Information from other sources
We may receive business contact information from partners, referral sources, or publicly available business directories.
Customer Data & Legal Matter Data
There are two different kinds of information at ClauseBorne, and we treat them differently.
Information we collect for our own business purposes. This is the information described in Section 2, such as account details and website usage. For this information, ClauseBorne decides why and how it is used. This policy applies fully.
Customer Data uploaded by law firms. This is the client, matter, intake, document, clause, template, and other content that firms and their users upload to or create in the platform ("Customer Data"). It may include personal information about the firm's clients and other third parties.
For Customer Data:
- The law firm is in control of it and is responsible for having a lawful basis to upload it.
- ClauseBorne processes it on the firm's behalf, only to provide the Services and as described in our Terms of Service and any Data Processing Addendum.
- We do not use Customer Data for our own marketing.
- If you are a client of a law firm using ClauseBorne, please contact that firm directly about your data or your privacy rights. We will help the firm respond to requests where we are required to.
How We Use Information
We use the personal information we collect for our own purposes to:
- Provide, operate, and maintain the Services
- Create and manage accounts and subscriptions
- Authenticate users and keep the Services secure
- Provide customer support and respond to requests
- Improve, test, and develop the Services
- Analyze how the site and platform are used
- Send service messages, and marketing communications where permitted (you can opt out at any time)
- Detect, prevent, and investigate fraud, abuse, and security incidents
- Meet legal, tax, and regulatory obligations and enforce our agreements
AI Processing & Model Providers
Parts of ClauseBorne use AI to help with tasks such as drafting and extracting information. This section explains how that works.
How Customer Data interacts with AI features
When a user runs an AI feature, the relevant content (for example, intake information, matter details, or clause text) is processed to generate the requested output. Output stays inside the firm's workspace and goes through attorney review before it is used.
Third-party AI providers
We use cloud-hosted LLM APIs, such as OpenAI and Anthropic, to power some AI features. Those providers process Customer Data only to return results to us, under contractual terms that forbid training models on customer inputs.
Model training
Customer Data, uploaded legal documents, and prompts are never used to train foundational or public AI models.
AI provider retention
Data sent to AI providers is kept strictly transient, per their API data retention policies.
Human access
Access to Customer Data at ClauseBorne is strictly restricted to authorized engineering personnel on a least-privilege, need-to-know basis for critical debugging or security maintenance.
Human review of outputs
AI output can be wrong. ClauseBorne is built so that attorneys review and approve output before it is finalized.
Data Security, Retention & International Transfers
Security
We use administrative, technical, and physical safeguards designed to protect personal information. See our Security & Compliance page for more detail. No system is perfectly secure, so we cannot guarantee absolute security.
Retention
We keep personal information only as long as needed for the purposes described in this policy, to meet legal obligations, resolve disputes, and enforce agreements. Customer Data is retained for the life of the customer's subscription and handled after termination as described in our Terms of Service and the customer's agreement.
Deletion
When information is no longer needed, we delete or de-identify it. Backups are overwritten on a regular cycle.
Data location and transfers
ClauseBorne is hosted on U.S. infrastructure (Vercel and AWS U.S. East). International data transfers are governed by standard commercial encryption and compliance frameworks.
Your Privacy Rights & U.S. State Rights
Depending on where you live, you may have some or all of these rights over the personal information we hold for our own purposes:
- Access: to know what we hold about you and to get a copy
- Correction: to fix inaccurate information
- Deletion: to ask us to delete your information
- Portability: to receive your information in a portable format
- Restriction or objection: to limit or object to certain processing
- Opt-out: to opt out of sale or sharing of personal information, targeted advertising, and certain profiling. We do not sell personal information.
- Appeal: if we decline your request, you may appeal by contacting us
- Non-discrimination: we will not treat you unfavorably for exercising your rights
How to make a request. Email support@clauseborne.ai. We may need to verify your identity. We aim to respond within 45 days, or sooner where the law requires.
Requests about Customer Data. If your request relates to information a law firm uploaded, we will direct you to that firm.
Policy Updates & Contact Information
Updates
We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. For material changes, we will give reasonable notice, such as an email or an in-product notice, before they take effect.
Contact us
Clauseborne, Inc., c/o Gotham, 420 Lexington Avenue, Suite 300, New York, NY 10170. Email: support@clauseborne.ai