Privacy Policy

01. Introduction and Who We Are

Claustar Inc. ("Claustar," "we," "our," or "us") operates an AI-powered document preparation and structuring platform available at claustar.com and through associated applications (the "Service"). Our Service helps founders, freelancers, and small businesses prepare structured contract drafts through a guided, situation-first process where the user makes all clause-level decisions and the platform presents options with context.

This Privacy Policy (the "Policy") describes how we collect, use, store, and share information about you when you use our Service, visit our website, interact with us by email, or otherwise engage with Claustar. It also describes your rights regarding your information and how to exercise them.

By accessing or using our Service, you agree to the practices described in this Policy. This Policy is incorporated into our Terms of Service, available at claustar.com/terms.

Certain U.S. states provide additional privacy rights. If applicable to you, see: Section 12 (California - CPRA), Section 13 (Virginia - VCDPA), Section 14 (Nevada).

02. Critical Disclosures - What Claustar Is and Is Not

2.1 Not a Law Firm. Not Legal Advice.

Claustar is a technology platform, not a law firm. The Service guides users through a structured, situation-based question-and-answer process and surfaces relevant clause options for the user to select, configure, and review. Claustar does not provide legal advice, legal counsel, or legal representation. Nothing you receive through this Service constitutes legal advice, and no attorney-client relationship is formed through your use of the Service.

2.2 No Attorney-Client Privilege

2.3 UPL Compliance Architecture

Claustar's product is specifically architected to avoid the unauthorized practice of law. The user, not the platform, makes all clause-level selections and document decisions. The platform surfaces options and context; it does not instruct you on what legal choices to make, does not analyze your specific legal rights or obligations, and does not determine which provisions of law apply to your situation.

03. Geographic Scope - United States Only

Claustar currently provides its Service exclusively within the United States. We do not currently operate in, market to, or knowingly accept users from any jurisdiction outside the United States. All data collected through the Service is stored and processed within the United States. We do not transfer personal information internationally.

3.1 North Carolina Restriction

Due to pre-operational compliance requirements under N.C.G.S. 84-2.2 - including mandatory State Bar registration and NC-licensed attorney certification of all document templates - Claustar does not currently serve North Carolina residents. We do not knowingly collect personal information from North Carolina residents. We will notify waitlisted North Carolina users when this restriction is lifted.

04. Information We Collect

4.1 Information You Provide Directly

• Account Information - your name, email address, password, and professional information
• Document Session Inputs - the situational facts, party role selections, agreement type selections, and clause configuration choices you make during a document session
• Subscription and Billing Information - your plan selection and payment details processed through our third-party payment processor. We do not store full card numbers
• Communications - emails, support messages, feedback, and survey responses you send us

4.2 Behavioral and Usage Data

A core function of the Claustar platform is building a proprietary behavioral intelligence layer that improves the Service for all users over time. Behavioral data we collect includes:

• Clause Selection Events - which clause types you select or skip for a given agreement type
• Time-on-Clause - how long you spend reviewing each clause explanation
• Edit Frequency - whether and how often you modify a presented clause
• Negotiation Pattern Events - in the Negotiate feature, which clauses are proposed, countered, accepted, or rejected (with explicit opt-in)
• Workflow Completion Patterns - where users drop off in the document creation flow
• Feature Interaction Logs - which platform features are used, in what sequence

Behavioral data does not include the text content of your contracts, your counterparty's identity, your deal terms, or any information that constitutes your intellectual property.

4.3 Automatically Collected Technical Data

• Device and Technical Data - IP address, browser type, operating system, device identifiers, and referring URLs
• Log Data - server logs recording access timestamps, errors, and system events
• Approximate Location - derived from IP address to determine your U.S. state for geographic eligibility verification

4.4 Cookies and Tracking Technologies

We use cookies, session tokens, and similar technologies to operate the Service - including session cookies, persistent cookies for preferences, and analytics pixels. You may control cookies through your browser settings.

4.5 Information from Third Parties

• Payment Processors - transaction confirmation and billing status from processors such as Stripe
• Authentication Providers - if you use SSO login, we receive basic profile data (name and email) from that provider

05. How We Use Your Information

5.1 Providing and Operating the Service

• Creating and managing your account
• Processing your document preparation sessions and generating structured contract drafts
• Processing subscription payments and maintaining billing records
• Troubleshooting, maintaining, and improving the technical performance of the Service
• Enforcing our Terms of Service and this Policy

5.2 Communicating With You

• Account notices - confirmations, receipts, subscription updates, and security alerts
• Responses to your support requests
• Product updates and feature announcements (you may opt out of non-essential communications at any time)

5.3 Safety, Security, and Legal Compliance

• Detecting and preventing fraud, abuse, and unauthorized access
• Verifying geographic eligibility
• Complying with applicable U.S. federal and state laws and regulations
• Responding to lawful requests from courts, law enforcement, or regulators

5.4 Building and Improving the Behavioral Intelligence Layer

We use aggregated and de-identified behavioral data to power the intelligence features of the Service - specifically the frequency signals, edit pattern insights, and negotiation intelligence that appear to all users (for example, "X% of users include this clause").

06. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

6.1 Service Providers

We share information with vendors performing functions on our behalf - cloud hosting, payment processing, email delivery, analytics, and AI API providers (currently OpenAI and Anthropic). These providers are contractually prohibited from using your information for any purpose other than providing services to us.

6.2 Attorney Reviewers (Verified Tier)

If you subscribe to our Verified tier, your document draft is reviewed by an independent licensed attorney retained by Claustar. These attorneys are bound by confidentiality obligations. Their review does not create an attorney-client relationship between you and the reviewing attorney.

6.3 Legal and Regulatory Disclosures

We may disclose information when required to comply with applicable law, respond to valid legal process, or protect the rights, safety, or property of Claustar or others.

6.4 Business Transfers

If Claustar is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

07. Data Retention

• Account information - retained for the duration of your account, deleted or de-identified within 30 days of account closure
• Document session content - retained for your subscription period and deleted within 30 days of account closure or upon written request
• Behavioral metadata - retained in de-identified and aggregated form indefinitely to power the intelligence layer; personally linked records deleted with your account
• Billing records - retained for a minimum of 7 years as required for financial compliance
• Communications and support records - retained for 3 years from last interaction
• Log and analytics data - retained for up to 24 months in identifiable form, then aggregated or de-identified

08. Behavioral Intelligence Data - The Claustar Intelligence Layer

8.1 What the Intelligence Layer Is

As users build documents on Claustar, the platform collects behavioral metadata about how they interact with clause options. Over time, this produces a dataset of signals - which clauses non-lawyers choose for which agreement types, which clauses get modified and how frequently - that power features visible to all users, such as frequency indicators ("Included in X% of agreements like this").

8.2 What We Collect and What We Do Not

We collect:

• Which clause category you selected or skipped, tagged to agreement type and user segment
• How long you spent reviewing a clause explanation before deciding
• Whether you accepted default clause language or modified it (we log that a modification occurred, not what the modification said)
• Workflow completion rates - where users exit the document flow

We do not collect for intelligence purposes:

• The actual text content of your contract drafts or modifications
• Your counterparty's name, company, or contact information
• The deal terms, dollar amounts, or substantive provisions of your agreements

8.3 Negotiation Feature Data

Counterparty behavioral data in the Negotiate feature is collected only with explicit opt-in consent from all parties and is used exclusively in aggregated, de-identified form. No counterparty's actual proposed language, redline content, or negotiation communications are retained.

8.5 Your Rights Regarding Intelligence Data

• Opt-out of behavioral data collection at any time through account settings - your ability to use the Service is not affected
• Deletion - upon account deletion, all personally linked behavioral records are deleted
• Transparency - you may request a summary of your behavioral event log at any time by contacting privacy@claustar.com

09. Third-Party AI Providers

Claustar's document generation pipeline is powered by AI APIs from third-party providers, currently including OpenAI and Anthropic. When you generate a document, portions of your session inputs are transmitted to these providers to produce the draft output. We have entered into data processing agreements with these providers that prohibit them from using your session inputs to train their foundation models or retaining your content for their own purposes.

10. Your Rights and Choices

10.1 Access and Correction

You may access or update your account information at any time through account settings. You may also request a copy of the personal information we hold about you or request correction of inaccuracies by contacting privacy@claustar.com.

10.2 Deletion

You may request deletion of your account and associated personal information by contacting privacy@claustar.com. We will process deletion requests within 30 days, subject to our retention obligations.

10.3 Behavioral Data Opt-Out

You may opt out of behavioral intelligence data collection at any time through your account settings or by contacting privacy@claustar.com. Opting out does not affect your ability to use the Service.

10.4 Communications Opt-Out

You may opt out of promotional communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at privacy@claustar.com. You cannot opt out of transactional communications.

11. Data Security

We implement organizational, technical, and administrative security measures to protect your information - including TLS encryption in transit, encryption at rest, access controls, and regular security assessments. No security program is perfect. If we become aware of a security breach materially affecting your personal information, we will notify you in accordance with applicable law.

12. Additional Disclosures for California Residents (CPRA)

12.1 Categories of Personal Information Collected

• Identifiers - name, email address, IP address, account credentials
• Commercial information - subscription plan and billing records
• Internet activity - usage data, feature interactions, behavioral events, log data
• Approximate geolocation - derived from IP address for U.S. state-level compliance verification
• Inferences - user segment classification derived from platform usage and registration data
• Professional information - job title and company name provided voluntarily

12.2 Your CPRA Rights

• Right to Know - what personal information we collect, use, and disclose
• Right to Delete - request deletion of your personal information, subject to exceptions
• Right to Correct - request correction of inaccurate personal information
• Right to Opt Out of Sale or Sharing - opt out of sharing for cross-context behavioral advertising
• Right to Non-Discrimination - we will not discriminate against you for exercising your rights

Submit requests to privacy@claustar.com. We will respond within the timeframes required by law.

13. Additional Disclosures for Virginia Residents (VCDPA)

Virginia residents have the right to confirm whether we process your personal data, access and correct it, request deletion, obtain a portable copy, and opt out of targeted advertising, sale of personal data, or profiling for significant decisions. Submit requests to privacy@claustar.com. We will respond within 45 days as required by law.

14. Additional Disclosures for Nevada Residents

Nevada law (NRS 603A.340) provides Nevada consumers the right to opt out of the sale of certain personal information. Claustar does not sell personal information as defined under Nevada law. For questions or requests, contact privacy@claustar.com.

15. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by email and by posting a prominent notice on our platform at least 30 days before the changes take effect.

16. Contact Us

Claustar Inc. | claustar.com | Not a law firm. Not legal advice. No attorney-client privilege.