GDPR Compliance
🛡️ Fully GDPR Compliant
We are committed to the highest standards of data protection and privacy compliance across the UK and EU.
1. Data Controller Information
ClausePro is operated by IntelliNexa AI Limited, registered in Hong Kong. For all personal data processing activities, IntelliNexa AI Limited acts as the Data Controller.
2. Lawful Basis for Processing
We process personal data on one or more of the following lawful bases:
- Contractual necessity (to provide our services to you)
- Legitimate interests (improving, securing, and administering our Service)
- Compliance with legal obligations
- Consent, where required (e.g., marketing communications)
3. Data Subject Rights
Under the GDPR, you have the following rights:
🔍 Access
Request a copy of your personal data held by us.
✏️ Rectification
Request correction or update of inaccurate or incomplete data.
🗑️ Erasure
Request deletion of your personal data ("right to be forgotten").
⏸️ Restriction
Request restriction of processing in certain circumstances.
📦 Data Portability
Receive your data in a commonly used, machine-readable format.
🚫 Objection
Object to processing based on legitimate interests or direct marketing.
↩️ Withdrawal of Consent
Where processing is based on consent, you may withdraw at any time.
To exercise your rights: Please contact us at privacy@clausepro.ai. We will respond within 30 days as required by law.
4. Data Residency & Security
🔒 Security Measures
- All personal data is stored and processed within secure data centers located in the UK and EU
- We use advanced encryption and strict access controls to protect your data
- Data is never transferred outside the UK/EU without adequate safeguards
5. Data Processing & Sub-Processors
- We only use trusted sub-processors (such as cloud hosting providers) that are fully GDPR-compliant and bound by data processing agreements.
- A current list of sub-processors is available on request.
6. Data Retention
- We retain personal data only as long as necessary to provide the Service and meet legal requirements.
- Users may request deletion of their data at any time (subject to any statutory retention obligations).
7. Data Breach Notification
In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant authorities without undue delay, as required by the GDPR.
8. Data Protection Officer (DPO)
We have appointed a Data Protection Officer (DPO) to oversee our data protection policies and compliance.
9. Further Information
For more details, please see our Privacy Policy and Cookie Policy.
If you have concerns about our data processing practices, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority.
10. Updates
We may update this GDPR Compliance page from time to time. Material changes will be communicated via email or through the Service.
Last updated: 24 May 2025
For any questions about our GDPR compliance or data protection practices, please don't hesitate to contact our Data Protection Officer.