Privacy Policy

1. Who We Are

Risky Clause is an AI-powered contract review platform operated by Risky Clause, based in Plano, Texas, USA. For the purposes of applicable data protection laws, Risky Clause is the data controller of the personal information collected through our platform.

If you have any questions about this Privacy Policy, you can contact us at support@riskyclause.com.

2. Information We Collect

Information You Provide

• Account information: Name, email address, and password when you create an account.
• Payment information: Billing details and payment method information processed through Stripe. We do not store full payment card details.
• Documents and content: Contracts and other documents you upload for analysis.
• Communications: Messages you send to us through our contact form or email.

Information Collected Automatically

• Usage data: How you interact with our platform, including features used, pages visited, and analysis history.
• Device information: Browser type, operating system, device type, and screen resolution.
• Log data: IP address, access times, referring URLs, and error logs.
• Cookies and similar technologies: We use essential cookies to maintain your session and preferences. See Section 7 for details.

3. How We Use Your Information

We use your information for the following purposes:

To Provide Our Service

• Process and analyze your uploaded documents using AI models
• Generate contract analysis reports and risk assessments
• Manage your account, credits, and transaction history
• Process payments through Stripe

To Improve Our Service

• Analyze usage patterns to improve platform features and performance
• Diagnose technical issues and fix bugs
• Develop new features and services
• Create anonymized, aggregated statistics that do not identify you

To Communicate With You

• Send transactional emails (account confirmations, analysis notifications, credit updates)
• Respond to your support inquiries
• Notify you of important changes to our service or policies

To Protect Our Service

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Third-Party AI Models

We send your uploaded documents and prompts to third-party AI language models (such as GPT, Claude, or Gemini) to generate contract analyses. All data is encrypted in transit. We have opted out of AI model training with all our providers—your data is NOT used to train these AI models.

Payment Processing

We use Stripe to process payments. When you make a purchase, your payment information is shared directly with Stripe and is subject to Stripe's Privacy Policy.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request. Where permitted, we will notify you before making such disclosures.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

• Account data: Retained for as long as your account is active. You may request deletion at any time.
• Analysis history: Your uploaded documents and generated reports are retained in your account for your reference. You can delete individual analyses from your history.
• Transaction records: Payment and credit transaction records are retained for accounting and legal compliance purposes.
• Usage and log data: Retained in anonymized or aggregated form for analytics purposes.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security monitoring and vulnerability assessments
• Encrypted communication with third-party AI providers

Important: While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies & Similar Technologies

We use the following types of cookies:

• Essential cookies: Required for the platform to function, including authentication and session management. These cannot be disabled.
• Analytics cookies: Help us understand how you use our platform so we can improve it. These collect anonymized usage data.

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Portability: Request a copy of your data in a portable format.
• Objection: Object to processing of your personal information in certain circumstances.
• Restriction: Request restriction of processing in certain circumstances.
• Withdrawal of consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@riskyclause.com. We will respond within 30 days.

9. European & UK Data Protection

If you are located in the European Economic Area (EEA) or the United Kingdom, the following additional provisions apply:

Legal Basis for Processing

• Contract performance: Processing necessary to provide you with our services.
• Legitimate interests: Processing for service improvement, security, and fraud prevention.
• Legal obligation: Processing required to comply with applicable laws.
• Consent: Where you have given explicit consent for specific processing activities.

International Data Transfers

Your data may be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to protect your data during international transfers.

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.

10. Children's Privacy

Risky Clause is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

11. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with your information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last Updated" date. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.