Privacy
This explains what ClauseWindow collects, why, and what you can ask us to do about it. It is written to be read rather than to be impressive.
The short version. We hold your contact details so we can talk to you, and copies of the contracts you send us so we can tell you when they renew. We do not sell anything to anyone, we run no advertising or analytics, and the site sets no cookies. You can ask us to delete everything at any time and we will, then confirm in writing.
Who is responsible
ClauseWindow, operated by the business owner, is the data controller for the information described here. Contact: [contact email not yet set].
What we collect, and why
| What | Why we have it | How long we keep it |
|---|---|---|
| Your name, business name, email, phone | To reply to you, deliver your audit, and send alerts and invoices | While you are a client, and up to 12 months after our last contact if you are not |
| Vendor contracts you send us | To extract renewal dates, notice periods and the clauses they come from | While you are a client. Deleted within 30 days of you ending the service, or sooner on request |
| The dates and clause extracts we derive | This is the service — it is what generates your alerts and your Window Map | Same as above |
| Invoices and payment records | To bill you, and because tax law requires records to be kept | As long as the applicable tax authority requires |
We do not collect anything else. No tracking pixels, no advertising identifiers, no behavioural profiling, no data bought from third parties.
The website itself
This site sets no cookies and runs no analytics. The audit request form does not transmit anything to us on its own — it opens your own email application with the details filled in, and nothing reaches us until you press send there. If that ever changes, this page will say so before it does.
The site loads fonts from Google Fonts, which means Google receives your IP address in order to serve them. That is the only third party the page contacts.
Who else sees your information
- Polar processes payments as merchant of record. They receive your billing details directly; we never see your card number. Their terms govern that data.
- Our email and file storage providers hold your correspondence and documents in the ordinary course of us using email and a computer.
- An AI language model is used to help read contract text and locate renewal clauses. Contract content is submitted to that provider for processing.
Tell us if that last point is a problem. Some businesses cannot allow contract text to leave their control, and that is a reasonable position. Say so before you send anything and we will read those documents manually instead. Ask us, in writing, which providers we currently use — we will tell you, and we will tell you if it changes.
We do not sell, rent or share your information with anyone else, and there is no circumstance in which we would.
Where your information is held
We operate from [country not yet set], and our providers may store data in other countries. If you are in the UK or EU, that means your information may be transferred outside your jurisdiction. Ask us for the current list of providers and locations at any time.
How we protect it
- Each client's documents are kept in a separate folder, never pooled.
- Two-factor authentication on every account that touches client material.
- Access is limited to the people who actually do the work — in practice, one person.
- We will sign a mutual non-disclosure agreement before you send us anything. Just ask.
No system is perfectly secure, and we will not pretend otherwise. If your information is ever compromised, we will tell you promptly and directly, with what we know and what we are doing about it.
Your rights
Whatever jurisdiction you are in, you can ask us to:
- tell you what we hold about you,
- correct anything that is wrong,
- delete everything,
- send you a copy of your data in a usable format,
- stop using it for a particular purpose.
Email [contact email not yet set]. We will respond within 30 days, and usually far sooner. There is no charge, and you do not need a reason.
If you are in the UK or EU, you also have the right to complain to your data protection authority. We would rather you came to us first, but that is your right and we will not discourage it.
Children
This is a service sold to businesses. It is not directed at anyone under 18 and we do not knowingly collect their information.
Changes
If this page changes materially, we will update the date at the top and tell existing clients by email. We will not change it quietly.