01Information we collect
When you create an account, we collect your email address and password. When you upload documents, we process the text content to extract compliance conditions. We store your project data, conditions, notes, evidence files, and activity logs in our database.
02How we use your data
Your data is used solely to provide the claused. compliance tracking service. We use document text to extract conditions with a large language model. We do not sell, rent, or share your data with third parties beyond the processors listed below. Document text is sent to Anthropic for extraction under a data-processing agreement. claused. does not use customer documents to train models.
03Data storage and security
Your data is stored on Supabase infrastructure in Sydney, Australia. All data is encrypted in transit (TLS) and at rest. Evidence files and uploaded documents are stored in private, encrypted cloud storage and served through short-lived signed links. Access to every table holding customer data is controlled by row-level security. The controls, the providers and the certification position are set out on our security page.
04Overseas disclosure and processors
claused. uses a small number of service providers to run the service. Each one receives only what it needs for its job, under a data-processing agreement or the provider's standard terms:
- Supabase stores your data in Sydney, Australia. This is where customer data lives at rest.
- Vercel hosts the application and carries traffic through its edge network.
- Anthropic receives the text of uploaded approval documents to extract conditions.
- Reducto receives some uploaded documents for PDF layout parsing, when enabled.
- Resend delivers email, and receives recipient addresses and message content.
- Stripe handles payments, and receives billing details. Card numbers never reach claused.
Some of these providers operate outside Australia. Where that is the case, your information may be disclosed to an overseas recipient for the purpose described, and claused. relies on the provider's data-processing agreement and security commitments. The full table of what each provider handles and where is on the security page, and we update it before adding a processor that handles customer data.
05Automated decision-making
claused. uses automated extraction to propose register entries from the documents you upload. A person on your project reviews the proposed entries before they count. Extracted conditions are held as unreviewed until a qualified person confirms them, and the review is recorded in the project activity log.
Rainfall-triggered inspections are scheduled automatically when a gauge reading meets the trigger set on the inspection template. This schedules work for a person to do. It does not judge whether anyone complied.
No decision that has a legal or similarly significant effect on an individual is made automatically by claused. The system records what people did and when. It does not determine compliance, rate individuals, or take action against anyone without a person deciding. If you have questions about how a particular automated step works, contact us at support@claused.com.au.
06Data retention
Your project data is retained for as long as your account is active. You can delete individual projects and their associated data at any time from your workspace. If you delete your account, all associated data will be permanently removed within 30 days.
07Your rights
You have the right to access, correct, or delete your personal data. You can export your compliance register data at any time via the spreadsheet or PDF export features. To request account deletion or data access, contact us at support@claused.com.au.
09Changes to this policy
We may update this policy from time to time. We will notify you of material changes via email or a notice on our website.
10Contact
For privacy-related inquiries, contact us at support@claused.com.au.