Privacy Policy

Last updated: 7 June 2026

Clavico is a commercial contract intelligence tool. It is not a law firm and does not provide legal advice. This policy explains how we collect, use, and protect your personal information.

1. Who We Are

Clavico (getclavico.com) is a commercial contract intelligence platform operated as an individual business based in Spain. Contact: [email protected]

2. What We Collect

Information you provide

First name and email address (entered on the scan form)
Contract document text (uploaded for analysis)
Marketing consent preference

Information collected automatically

IP address and browser type (via Cloudflare)
Pages visited and time of visit (via Plausible Analytics — cookieless)
Device information

3. How We Use Your Information

To deliver your contract analysis report
To send your report by email
To send product updates and contract intelligence tips (only with your consent)
To maintain platform security and prevent fraud
To improve the service using anonymised analytics

4. Contract Document Processing

When you upload a contract document, the text content is transmitted to Anthropic (our AI processing provider) solely to generate your commercial intelligence report. Contract text is stored securely on our servers for a maximum of 90 days from the date of upload, after which it is permanently and automatically deleted. We do not use contract text for any purpose other than delivering the requested analysis. We do not train AI models on user-uploaded contract content.

5. Who We Share Your Data With

We share data only with service providers who help us deliver the service:

Anthropic — AI analysis (contract text processed to generate report)
Hetzner — Hosting and data storage (EU datacenter)
Stripe — Payment processing (we never see your card details)
Brevo — Email delivery (receives your email address to send reports)
Cloudflare — CDN and security (processes IP addresses)
Plausible Analytics — Cookieless, anonymised website analytics

We never sell your personal data. We never share it for marketing purposes.

6. Legal Bases for Processing (GDPR)

Performance of a contract — processing your scan to deliver the report you paid for
Consent — sending marketing emails (only if you opted in)
Legitimate interests — platform security, anonymised analytics, service improvement

7. How Long We Keep Your Data

Contract text and scan reports: automatically deleted after 90 days
Email address and name: retained until you request deletion
Payment records: retained as required by law (typically 7 years)

8. International Transfers

Your data may be transferred to and processed in the United States (Anthropic, Stripe) and the European Union (Hetzner). These transfers are made under Standard Contractual Clauses in accordance with GDPR requirements.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Withdraw consent to marketing at any time
Lodge a complaint with your data protection authority

To exercise any of these rights, email [email protected]. We will respond within 30 days.

10. Security

We protect your data with HTTPS encryption, security headers, isolated database access, and regular security updates. No system is 100% secure — if you have security concerns, contact us immediately at [email protected].

11. Cookies

Clavico does not use tracking cookies. We use Plausible Analytics, which is cookieless and GDPR-compliant by design. No cookie consent banner is required.

12. Children

Clavico is not directed at children under 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be communicated by email.

14. Contact

Questions about this policy or your data:
Email: [email protected]
Clavico, Spain