Privacy Policy

Last updated: May 2026

1. Data Controller

The data controller under GDPR is:
[Name to be added after business registration]
[Address to be added after business registration]
Email: hello@clausecheck.de

2. Data We Collect

  • Email address (optional, only when creating an account)
  • Rental contract text — contract text is processed temporarily for analysis purposes and is not permanently stored after processing. By uploading a contract, users confirm they have the right to process and analyze the uploaded document using ClauseCheck.
  • Users should avoid uploading unnecessary sensitive personal data unless required for contract analysis.
  • Analysis results (7 days for free reports, 30 days for paid reports)
  • Session identifiers used for authentication, security, and platform functionality
  • Payment data (processed by Stripe — we never store card details)

3. Purpose of Processing

Your data is used solely to provide the ClauseCheck service: analysing rental contracts, generating reports, and processing payments.

4. Legal Basis

Processing of uploaded contracts and account-related functionality is based on Art. 6(1)(b) GDPR (contract performance). Security, fraud prevention, and service reliability are based on Art. 6(1)(f) GDPR (legitimate interest).

5. Data Sharing and Processing

ClauseCheck uses the following providers, who process data solely as necessary to provide their respective services to ClauseCheck:

  • Anthropic — AI processing provider used for contract analysis in accordance with applicable data processing and privacy protections.
  • Supabase — Database hosting (Frankfurt, Germany)
  • Stripe — Payment processing
  • Vercel — Hosting (Frankfurt, Germany)
  • Resend — Email delivery

6. International Data Transfers

Some third-party providers used by ClauseCheck may process data outside the European Economic Area (EEA). Where applicable, appropriate safeguards such as Standard Contractual Clauses (SCCs) are used to protect personal data.

7. Your Rights

You have the right to access, rectify, delete, restrict processing, and port your data. To export or delete your data, visit your Profile page or contact us at hello@clausecheck.de.

8. Data Retention

Data is retained only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and maintain platform security. Free reports are automatically deleted after 7 days. Paid reports are automatically deleted after 30 days.

9. Cookies

ClauseCheck uses essential cookies and session storage technologies required for authentication, security, fraud prevention, and payment processing. No advertising or behavioral tracking cookies are currently used.

10. Security Measures

ClauseCheck uses encrypted HTTPS connections (encryption in transit), limited-access infrastructure, authentication protections, abuse prevention measures, and limited data retention policies to help protect user data.

11. Data Breach Notification

In the event of a legally required personal data breach notification, affected users and relevant authorities will be informed in accordance with GDPR obligations.

12. Automated Analysis

ClauseCheck uses AI-assisted systems to analyze uploaded rental contracts. Analysis results are informational only and may contain inaccuracies or incomplete interpretations. Human legal review may still be necessary.

13. Age Restrictions

ClauseCheck is intended for users who are at least 18 years old and is not directed toward children.

14. GDPR Complaint Rights

Users have the right to lodge a complaint with a competent data protection supervisory authority within the European Union.

15. Contact

For privacy questions: hello@clausecheck.de