Privacy Policy

The short version

We collect the minimum data needed to run the service and make it work for you. We don't sell your data. We don't use your content to train AI models. You can request deletion at any time.

This policy applies to all Claudomat users worldwide, including users in the European Union (GDPR) and California (CCPA).

Who we are

Claudomat, Inc. is the data controller for personal data collected through the Claudomat platform.

Contact for privacy matters: support@claudomat.dev

What we collect

Account information. When you sign up, we collect your name, email address, and billing information. We use Stripe for payment processing — we never store your full card details.

Content you provide. Documents, prompts, operating instructions, and other data you input into Claudomat to operate your business. This is your content and it stays yours.

Usage data. How you interact with the platform — pages visited, features used, session duration. We use this to improve the product.

Technical data. IP address, browser type, device information. Standard server logs, retained for up to 90 days.

Communications. If you email us or use in-app support, we keep those messages to resolve your issue and improve support quality.

Why we collect it (legal basis)

• To perform our contract with you — account management, delivering the service, processing payments.
• Legitimate interests — improving the product, preventing fraud, security monitoring, sending service-related emails.
• Legal obligations — tax records, responding to lawful requests from authorities.
• Your consent — marketing emails (you can unsubscribe at any time).

EU users: these are the GDPR legal bases under Article 6. We will not process your data for purposes incompatible with those listed above.

Who we share data with

We do not sell your personal data. We share data only with:

• AI model providers (e.g. Anthropic) — to process your prompts and generate outputs. They operate under their own privacy policies and data processing agreements.
• Infrastructure providers — cloud hosting, databases, and CDN services that store and serve the platform.
• Payment processors — Stripe processes billing on our behalf.
• Analytics tools — anonymized, aggregated usage data only. No personal identifiers.
• Legal requirements — if required by law, court order, or to protect rights and safety.

All third-party providers are vetted for compliance with applicable data protection laws and operate under data processing agreements where required.

International transfers

Claudomat is based in the United States. If you use the platform from the EU or other regions with data protection laws, your data may be transferred to and processed in the US.

For EU users, we rely on the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable to ensure your data receives equivalent protection.

How long we keep your data

• Account data is kept for as long as your account is active, plus 30 days after deletion (to allow for recovery).
• After 30 days post-account-deletion, all personal data and content is permanently deleted from our systems.
• Billing records are retained for 7 years as required by tax law.
• Server logs are retained for up to 90 days.

Your rights

You have the following rights regarding your personal data. To exercise any of them, email support@claudomat.dev. We respond within 30 days.

EU users: you also have the right to lodge a complaint with your local supervisory authority (e.g. your national data protection authority).

California residents (CCPA): you have the right to know what personal information we collect, to delete it, to opt out of its sale (we don't sell it), and to non-discrimination for exercising your rights.

Cookies

We use essential cookies to keep you logged in and maintain your session. We may use analytics cookies to understand how people use the platform — these are anonymized and aggregated.

We do not use advertising or tracking cookies. You can control cookies through your browser settings.

Security

We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is 100% secure. If we become aware of a breach affecting your data, we will notify you as required by applicable law.

Children

Claudomat is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We'll notify you by email and update the "Effective" date above. For significant changes, we'll give you at least 14 days' notice before they take effect.

Contact

For privacy questions, data requests, or concerns, email support@claudomat.dev.

Claudomat, Inc.  ·  Delaware, USA