Privacy Policy

ProJohnson Consulting Ltd ("Clauvia AI", "we", "us", "our") operates the Clauvia AI platform at https://clauvia.ai. We are registered in the United Kingdom and act as the data controller for all personal data collected through this platform.

Contact: For all privacy-related enquiries, please email admin@clauvia.ai.

We collect only the minimum personal data necessary to provide the Clauvia AI service:

We do not collect payment card information directly. All payment data is handled exclusively by Stripe, Inc. under their own security framework.

For users in the United Kingdom and European Economic Area, we rely on the following legal bases under Article 6 of the UK GDPR:

• Performance of a contract — creating your account, delivering document generation, processing payments
• Legitimate interests — operating Google Analytics to improve the platform (where consent is given)
• Legal obligation — responding to lawful requests from courts or regulators
• Consent — non-essential cookies (analytics and marketing)

We use the following types of cookies on clauvia.ai:

• Essential cookies — required for the platform to function (login sessions, security). Always active.
• Analytics cookies — Google Analytics, used to understand platform usage. Only active with your consent.
• Marketing cookies — currently not in use.

You can manage your cookie preferences at any time using the cookie banner or by clearing your browser cookies. For more information, see aboutcookies.org.

We use your personal data only for the following purposes:

• Creating and managing your Clauvia AI account
• Delivering the AI-powered legal document generation service
• Processing payments through Stripe
• Sending transactional emails (payment confirmations, document ready notifications)
• Improving the platform using anonymised analytics
• Complying with legal obligations
• Preventing fraud and abuse

We do not use your data for automated decision-making with legal effects, direct marketing (unless you opt in), or AI model training.

We do not sell, rent, or trade your personal data. We share data only with:

• Stripe, Inc. — payment processing only
• Anthropic, PBC — AI document generation (your questionnaire answers are processed to generate your document)
• Supabase — secure database hosting in West EU (Ireland)
• Clerk — authentication services
• Resend — transactional email delivery
• Google LLC — analytics (with your consent only)
• Vercel — platform hosting

All third-party processors are bound by data processing agreements requiring appropriate security measures.

We retain your personal data for as long as necessary to provide the service and comply with legal obligations:

• Account data — retained for the duration of your account plus 7 years (UK legal requirement)
• Generated documents — retained indefinitely as part of your account history (deletable on request)
• Payment records — retained for 7 years (financial compliance)
• Analytics data — retained for 26 months (Google Analytics default)

Under UK GDPR and EU GDPR, you have the following rights:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to portability — receive your data in a machine-readable format
• Right to restriction — limit how we process your data
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent for cookies at any time

To exercise any of these rights, email admin@clauvia.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are in the UK, or your local data protection authority if you are in the EU.

Your data is primarily processed within the UK and European Economic Area. Where data is transferred outside these regions (for example, to Anthropic or Stripe in the United States), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK ICO and European Commission.

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Row Level Security (RLS) on our database
• Service role key restrictions on server-side access only
• Regular security reviews

We may update this Privacy Policy from time to time. We will notify you of significant changes by email and by posting a notice on the platform. The date at the top of this page indicates when the policy was last updated.

For any privacy-related questions, requests, or concerns:

• Email: admin@clauvia.ai
• Platform: https://clauvia.ai
• Registered: United Kingdom