Privacy Policy

1. Introduction

ClauseKey, wholly owned by Better Frameworks Pty Ltd ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our NSW property contract analysis service.

By using ClauseKey, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (encrypted)

2.2 Contract Documents

We collect and temporarily store the PDF contract documents you upload for analysis. These may contain:

• Property addresses
• Contract terms and conditions
• Special conditions
• Other information contained in NSW property contracts

2.3 Payment Information

We use Stripe for payment processing. We do not store your credit card information. Stripe collects and processes:

• Credit card details
• Billing address
• Email address

For more information, see Stripe's Privacy Policy.

2.4 Usage Data

We automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring website
• Contract analysis metadata (anonymized)

3. How We Use Your Information

We use your information to:

• Provide Services: Analyse your contracts and generate reports
• Process Payments: Manage subscriptions and billing through Stripe (Stripe may send you payment receipts and invoices directly)
• Communicate: Send service updates, security alerts, and support messages (you can manage your notification preferences in your account settings)
• Comply with Law: Meet legal obligations and prevent fraud

3.1 Aggregate and Anonymised Data

We may collect, compile, and use aggregate and anonymised data derived from your use of the service. This data:

• Does not identify you or any individual personally
• Does not include the content of your uploaded contracts
• Cannot be reverse-engineered to identify specific users or documents

We may use this aggregate data to:

• Improve and optimise our service
• Generate industry benchmarks and insights
• Understand usage patterns and popular features
• Develop new features and functionality

Important: This is entirely separate from AI training. We never use your actual contract content to train AI models.

4. Data Retention and Deletion

4.1 Automatic Deletion Schedule

• Contract Documents: Deleted 7 days after your subscription ends (grace period for data export)
• Analysis Reports: Deleted 7 days after your subscription ends (grace period for data export)
• Account Data: Retained while your account is active; deleted upon account closure
• Payment Records: Retained as required for accounting and legal purposes (typically 7 years)

7-Day Grace Period: When your subscription ends, you have 7 days to export any reports you wish to retain. After this grace period, your documents and reports will be permanently deleted and cannot be recovered.

4.2 User-Initiated Deletion

You can request deletion of your documents and data at any time by contacting us at privacy@clausekey.com.au. We will process deletion requests within 30 days.

Note: Requesting data deletion does not entitle you to a refund. All purchases remain final as per our Terms of Service.

5. How We Share Your Information

5.1 Third-Party Services

We share data with these trusted service providers:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Anthropic: AI contract analysis — your documents are sent to Anthropic's API for processing only; they are not stored or used for AI training
• Sentry: Error tracking (anonymised data only)

5.2 Solicitor Referral Service

If you use our solicitor referral service, we may share your information with referred solicitors or conveyancers to facilitate their contact with you. This may include:

• Your name and contact details (email, phone number if provided)
• Property address and contract details relevant to your enquiry
• Your ClauseKey analysis report (if you consent to sharing)

Important: Once your information is shared with a referred solicitor or conveyancer, their use of your data is governed by their own privacy policy. ClauseKey is not responsible for how referred professionals handle your information. We recommend reviewing their privacy policy before engaging their services.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation.

5.4 Report Sharing

ClauseKey allows you to create shareable links to your analysis reports. If you use this feature:

• Anyone with the share link can view your report content, including contract details and AI analysis
• Recipients who access shared reports are not covered by this Privacy Policy
• ClauseKey does not collect personal information from third parties who view shared reports (other than anonymised access logs such as view counts)
• You are responsible for only sharing with trusted parties who have a legitimate need
• You should ensure you have the authority to share the contract information before creating a share link

See our Terms of Service (Section 13) for full details on your responsibilities when sharing reports.

5.5 We DO NOT:

• Sell your personal information to third parties
• Share your contracts without your consent (except with AI processing services as required to provide the service)
• Share your data with real estate agents
• Share your data with solicitors or conveyancers unless you specifically request a referral

6. Data Security

We implement industry-standard security measures:

• Encryption: All data encrypted in transit (TLS/SSL) and at rest
• Authentication: Secure password hashing and JWT token validation
• Access Control: Row-level security policies in database
• Monitoring: Real-time error tracking and security alerts
• Regular Audits: Periodic security reviews and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Privacy Rights

Under the Australian Privacy Principles (APPs), you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications

How to Exercise Your Rights

Contact us at privacy@clausekey.com.au with your request. We will respond within 30 days.

Data Export

You can export your contract analysis data directly from your dashboard. This allows you to download copies of your analysis reports for your own records. Exported data is provided in standard formats (such as PDF) for your convenience.

8. Automated Decision Making

ClauseKey uses artificial intelligence and automated systems to analyse property contracts. We are committed to transparency about how these systems work.

8.1 How Automated Analysis Works

When you upload a contract, our AI system:

• Extracts and processes text from your uploaded PDF document
• Analyses contract clauses, modifications, and special conditions
• Compares clauses against standard NSW contract terms
• Generates a report highlighting areas that may warrant further review

8.2 Information Used in Analysis

The automated analysis uses only:

• The content of the contract document you upload
• Our knowledge base of standard NSW property contract terms

The analysis does not use your personal information (such as name or email) to generate contract analysis results.

8.3 Limitations and Human Oversight

The automated analysis may contain errors, omissions, or inaccuracies. It should not be relied upon as a substitute for professional legal advice. Always consult a qualified solicitor or licensed conveyancer before making decisions about property contracts.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Ensure security
• Measure how visitors find and use ClauseKey, so we can improve the service
• Measure the effectiveness of our marketing and advertising

Some of these cookies are set by us, and some are set by third-party analytics and advertising providers, including Google and Meta. These providers may use this information to show relevant ads and to measure the performance of our marketing across their platforms. We do not sell your personal information.

You can disable cookies in your browser, opt out via your device or browser ad-tracking settings, or use the opt-out controls offered directly by each platform. Disabling cookies may affect site functionality.

10. Children's Privacy

ClauseKey is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries outside of Australia, including:

• United States: Anthropic (AI processing), Stripe (payment processing), Sentry (error tracking)
• Overseas analytics and advertising providers: Google and Meta

We only share data with providers that maintain appropriate security and privacy standards. By using ClauseKey, you consent to this international transfer of data as necessary to provide the service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Continued use of ClauseKey after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

14. Data Breach Notification

In accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988, we will notify you and the Office of the Australian Information Commissioner (OAIC) if we become aware of an eligible data breach that is likely to result in serious harm.

If a breach occurs, we will notify affected users as soon as practicable and provide information about the breach and recommended steps you should take.

15. Complaints

If you believe we have breached your privacy rights, please contact us first at privacy@clausekey.com.au. We take all complaints seriously and will respond within 30 days.

If you're not satisfied with our response, you can lodge a complaint with: