Privacy Policy.

Claract, Inc is a Delaware corporation operating the Claract platform, a compliance review service for residential property management notices. This Privacy Policy governs how we collect, use, and protect personal data submitted to or generated by the Claract platform.

Governing law: State of Delaware, United States.

• Account information: name, email address, company name, portfolio size, and role.
• Notice text: draft resident notices submitted for review, including referenced fees, notice periods, and disclosure statements.
• Lease and fee schedule documents: uploaded documents used as reference for compliance review.
• Review history: findings generated, reviewer actions, sign-off timestamps, and packet status.
• IP and usage logs: IP addresses, browser type, access times, and feature usage for security and service improvement.

• To operate the review service — generating Compliance Packets, comparing notices against leases and fee schedules, and applying jurisdiction-specific rules.
• To improve the AI model — review outcomes and corrections may be used to refine analysis accuracy (see Section 4 for AI processing details).
• To send transactional email — account notifications, review completion alerts, and security notices.

Notice text and uploaded documents submitted for review are sent to Anthropic's Claude API for analysis. This includes:

• Draft notice content, including resident names and unit numbers when present in the document.
• Fee schedule line items and lease sections you have uploaded or referenced.
• Jurisdiction policy data from Claract's internal library, matched to your property location.

Anthropic processes this data under its enterprise data handling agreement. Under enterprise terms, documents sent to Claude are not used to train Anthropic's models.

Draft notices are retained on a 90-day rolling basis unless changed by customer configuration. Customer deletion requests and contract termination trigger permanent deletion of documents and review data according to the configured deletion workflow. Backups may retain encrypted copies for up to 30 additional days before secure expiry.

Notices submitted for review may contain resident names, unit numbers, and other identifying information. This data is processed solely as part of the review service — to compare notice content against lease terms, fee schedules, and jurisdiction requirements.

Resident personal data is not used for any purpose outside the review service. It is not shared with third parties except as required for AI processing (Anthropic) and infrastructure hosting (Supabase), both under data protection agreements.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.

For privacy-related questions, data access requests, or to exercise your rights, contact us at privacy@claract.net.