Privacy notice
Last updated 6 November 2026
How Clausa handles personal data for the solicitors' practices that use it, and for the people in their matters.
Draft for the solicitor's reading before launch. Passages marked below are not final.
Who we are
Clausa is software sold by the seat to solicitors' practices in Ireland. It is run by [company name and registration number to be added on incorporation]. Clausa sells only to practices: it has no contract with the public and does not act for anyone.
Questions about this notice: hello@clausa.ie.
To be confirmed by the solicitor (with Diego): Registered office and the contact for data protection requests, once the company is incorporated.
Two roles
| Data | Who decides | Clausa's role |
|---|---|---|
| Everything in a firm's account: matters, documents, drafts, precedents, deadlines, comments and the firm's audit log | The firm | Processor (GDPR Article 28) |
| The firm's client portal: invitations, intake answers, and the documents and updates the firm shares | The firm | Processor (GDPR Article 28) |
| Accounts and seats of the firm's users, billing, and telemetry without content | Clausa | Controller |
For a firm's matters and its portal, the firm is the controller and decides why and how the data is used, including any health, trade union or criminal offence data a matter needs. Clausa processes that data only on the firm's instructions, under the data processing agreement with the firm, and uses it for no purpose of its own.
If you are a client of a firm, or someone named in a matter, the firm's own privacy notice applies and the firm answers your requests. A request that reaches Clausa about a firm's data is passed to the firm.
What Clausa controls, and why
- Accounts: name, e-mail address, firm, role, the two-factor authentication used to sign in and, for a solicitor seat, the roll number Clausa checks.
- Seats and billing: the seats of each type, the billing contact, VAT number and invoices. Stripe takes the payment; Clausa never sees a card number.
- Telemetry without content: the cost and timing of each AI call, error reports with content removed, and product statistics made of ids and counts.
| Purpose | Legal basis |
|---|---|
| Running the firm's account, its seats and its users' sign-in | Contract with the firm, and legitimate interests in giving its users access |
| Checking that a solicitor seat belongs to a solicitor with a current practising certificate | Legitimate interests |
| Invoices, VAT and tax records | Legal obligation |
| Security, abuse prevention and error reports | Legitimate interests |
| Product statistics without cookies, to improve Clausa | Legitimate interests |
To be confirmed by the solicitor: The legitimate interests assessment for each purpose, with the DPIA.
AI and the firm's data
- Clausa uses Claude models through Google Cloud Vertex AI in its EU region. Only the text needed for a task in the matter is sent.
- Clausa does not use a firm's data to train AI models and never uses one firm's data for another firm. A precedent of one firm is never used to draft for another.
- That the model provider does not train on the data or keep it depends on the Google Cloud terms for Vertex AI: to be confirmed in the signed contract.
- Clausa's code refuses any Vertex AI location outside the EU, and refuses Anthropic's own service everywhere except a developer's machine working with made-up data.
- Search over legal texts and over the firm's own documents and precedents uses Google's gemini-embedding-001 model on Vertex AI in europe-west1 (Belgium). No other provider receives the text for search.
Where the data is and who processes it
Clausa keeps firm data in Europe and runs its AI models in the EU. Each provider below is called by Clausa's code today. Where a region or a term depends on a provider setting or a signed contract, the table says so.
| Provider | What for | Data it receives | Where |
|---|---|---|---|
| Lovable (Lovable Cloud, on Supabase) | Database, sign-in, file storage | All firm data | Europe. Region to be confirmed in the project settings |
| Cloudflare (through Lovable hosting) | Runs the application | Requests in transit | Edge network. Where requests execute: to be confirmed |
| Google Cloud (Vertex AI) | AI models that draft, extract and check, and the search over legal texts and the firm's documents | The text needed for each task | EU: the models in the EU multi-region, the search in europe-west1 (Belgium). Contract terms on training and retention: to be confirmed |
| Stripe | Payments, invoices and VAT for the firm's seats | Billing contact, seats, invoices; no matter data | Stripe Payments Europe, Ireland. Entity to be confirmed at account set-up |
| Resend | Service e-mails (sign-in links, reminders, notices to the firm) | E-mail address and the text of the notice; no documents | Region to be confirmed at account set-up |
| Sentry | Error reports | Technical error data, content removed before sending | Region to be confirmed |
| PostHog | Product statistics from Clausa's servers | Ids and counts only | EU (eu.i.posthog.com) |
- Not used for firm data: Anthropic's own service (development and evaluation with made-up data only, refused by Clausa's code anywhere else) and electronic signature providers (switched off; the firm uses its own signature tool).
- Clausa tells firms before it adds or replaces a sub-processor, as the data processing agreement sets out (to be confirmed in the final agreement).
Access by Clausa staff
Clausa's interface gives staff no view of a firm's matters. Support access needs the owner's written reason, lasts 24 hours and is recorded in the firm's audit log. Staff holding the administrator keys of the database can technically reach the data; who holds them and how their use is logged is to be confirmed.
How long it is kept
- Closed matters: the firm sets how many years they are kept. 30 days before that date the firm is told, then the content is erased; a minimal record stays with the audit log and the firm receives a certificate of erasure.
- End of the subscription: the owner has 60 days to read and export everything. Then the whole firm is erased, checked to be empty, and the owners receive a certificate of erasure.
- Accounts and seats: while the firm's account exists.
- Invoices: for as long as tax law requires.
To be confirmed by the solicitor: How long telemetry and the hosting provider's backups are kept, with the DPIA.
Your rights
For data Clausa controls, you can ask to see, correct, export or delete it, and object to processing based on legitimate interests: write to hello@clausa.ie. We answer within one month. For data in a firm's matters or portal, ask the firm; Clausa helps the firm answer.
You can complain to the Data Protection Commission (dataprotection.ie).