Privacy Policy

1. Overview

CLM Engine ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding it. By using the Service, you consent to the practices described here.

2. Information We Collect

• Account data: name, email address, phone number, organisation, and password (stored as a hashed value — never in plain text).
• Google OAuth data: if you sign in with Google, we receive your name and email from Google. We do not receive or store your Google password.
• Usage data: search queries, AI chat messages, pages visited, and interaction events — used to improve the Service.
• Device & log data: IP address, browser type, operating system, and timestamps collected automatically via server logs.
• Cookies & session tokens: used to keep you logged in and remember your preferences (see Section 6).

3. How We Use Your Data

• To create and manage your account.
• To authenticate you and maintain your session securely.
• To provide search, AI chat, and other core features of the Service.
• To send transactional communications (e.g., OTP codes, account notifications).
• To improve, debug, and develop new features.
• To detect and prevent fraud, abuse, or security incidents.
• To comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Sharing

We may share data with:

• Service providers: hosting, email delivery, and analytics platforms that process data on our behalf under strict data-processing agreements.
• Google (OAuth): when you choose to sign in with Google, limited authentication data is exchanged with Google in accordance with Google's own privacy policy.
• Law enforcement / legal process: when required by law, court order, or to protect the rights and safety of users and the public.

5. Data Retention

We retain your personal data for as long as your account is active or as required to provide the Service. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for a limited period thereafter to meet legal obligations or resolve disputes.

6. Cookies

We use the following types of cookies:

• Essential cookies: required for authentication and session management. The Service cannot function without them.
• Preference cookies: remember your settings (e.g., dark mode, selected stores).
• Analytics cookies: help us understand how the Service is used so we can improve it. No personally identifiable searches are shared with third-party analytics.

You can control non-essential cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

7. Security

We implement industry-standard security measures including HTTPS encryption, hashed password storage, and access controls. However, no method of transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing activities.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at the address below.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the Service. Continued use after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

For privacy-related questions or data requests, contact us at: support@thecustomslaw.com