Privacy Policy
Last Updated: 29 October 2026
1. Introduction
ClauseFlow is operated by Nikhil Rathee (sole proprietor), Maman Vihar, Bahadurgarh, District Jhajjar, Haryana 124507, India. This Privacy Policy governs your use of the ClauseFlow platform and explains how we collect, safeguard, and disclose information that results from your use of our service. We are committed to ensuring the absolute confidentiality of legal data entrusted to our platform.
2. Data Collection and Use
We collect several different types of information for various purposes to provide and improve our service to you:
- Account Data: Email addresses, names, and professional credentials required for authentication and workspace provisioning.
- Drafting Data: Text, facts, and documents you input into the drafting and research modules.
- Usage Data: Information on how the service is accessed and used (e.g., features engaged, error logs) for security and operational improvement.
3. Legal and Confidential Data Handling
We recognize that the information you input may be subject to attorney-client privilege or strict confidentiality. ClauseFlow does NOT use your proprietary drafting data or client facts to train foundational AI models.Our AI provider is Google's Gemini API on a paid (billed) account. Under Google's terms for paid use, your prompts and the responses are not used to improve Google's products; Google logs them for a limited period only to detect abuse and meet legal requirements. Legal research searches are sent with general legal terms, not your case facts. Your data is kept within your own firm or personal workspace.
4. Data Sharing and Third-Party Processors
To provide the service, we may share limited data with secure cloud infrastructure providers (e.g., Google Cloud, Firebase) and specialized API providers (e.g., Indian Kanoon, LLM providers). All third-party providers are bound by strict data processing agreements and confidentiality obligations. We do not sell your personal data.
5. Security Safeguards
The security of your data is paramount. We implement commercially acceptable cryptographic protocols, secure socket layers (SSL), and rigorous access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention and Deletion
We retain Account Data for as long as your account is active. Drafting data stays in your workspace until you delete it. You can ask for a copy, correction or full deletion of your data at any time from Settings → Data & Privacy → Your data rights, or by e-mailing our Grievance Officer. Records the law requires us to keep, such as tax invoices, are retained only for the period the law requires.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, update, or delete the information we have on you. If you are unable to perform these actions yourself through your account settings, please contact us for assistance.
7A. Digital Personal Data Protection Act, 2023
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Nikhil Rathee, trading as ClauseFlow, is the Data Fiduciary for the personal data of its account holders. Where you enter a client's or a third party's personal data into a draft, you decide the purpose and means, you are responsible for having a lawful basis to use it, and ClauseFlow processes it only to provide the drafting and research service you asked for.
We process personal data on your consent or for the lawful uses the DPDP Act permits, only for the purposes described in this policy, and we ask you to enter only what a document needs. You may withdraw consent, access, correct or erase your personal data, and nominate a person to exercise these rights on your behalf if you die or become incapacitated, by writing to our Grievance Officer (see the Grievance page). We respond within 15 days. If you are not satisfied you may complain to the Data Protection Board of India.
Our cloud and AI providers may process data on servers outside India. Such transfer is made only to countries the Central Government has not restricted. If a personal data breach affecting you occurs, we will inform you and the Data Protection Board as the law requires. Our service is for legal professionals and is not directed at children; we do not knowingly process the personal data of anyone under 18.
Firm Memory: the drafting preferences you choose to save are stored against your account only, are used only to shape your own drafts, and can be deleted by you at any time. We refuse to store personal identifiers or case numbers in them.
Advertising measurement: on our public marketing and course pages we use the Meta pixel only if you click "Allow" on the consent banner. If you register for an event after allowing it, your e-mail or phone may be shared with Meta in hashed form.
8. Contact and Grievance Officer
Questions about this policy, requests to exercise your rights, and complaints about personal data go to our Grievance Officer, Adv. Nikhil Rathee (Grievance Officer (Proprietor)), Maman Vihar, Bahadurgarh, District Jhajjar, Haryana 124507, India, e-mail adv.nikhilrathee@clauseflow.in, phone +91 95188 26957. We acknowledge within 48 hours and respond within 15 days. The full procedure is on the Grievance page.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You will be required to consent to material updates before continuing to use the service.