Privacy Policy
Last updated: 12 July 2026
Venedon CLM (“we”, “us”) processes account, organisation, and contract related data to provide commercial lifecycle intelligence services to your organisation. This draft summarises intended practices for pilot and production operation.
Data we process
- Account identifiers (email, name, organisation membership, role)
- Contract documents and derived analysis (facts, scores, obligations)
- Operational logs needed to run and secure the service
- Billing metadata when Stripe is configured (handled by Stripe as processor)
Purposes
We process data to authenticate users, isolate tenant data, run the analysis pipeline, support approvals and portfolio workflows, and operate the product (including error monitoring when Sentry is configured).
Subprocessors (illustrative)
Depending on configuration, processing may involve hosting, database, object storage, AI providers, email delivery, and error monitoring vendors. Final subprocessors and transfer mechanisms will be listed in the counsel-approved version and any Data Processing Agreement.
Retention
Soft-deleted contracts may be retained for a scheduled retention window before hard deletion. Exact retention schedules will be confirmed with counsel and reflected in customer agreements.
Your rights
Depending on applicable law, individuals may have rights of access, correction, erasure, and objection. Organisation admins should contact us to exercise rights relating to tenant data where appropriate.
No certification claims
This draft does not claim SOC 2, ISO, or other compliance certifications. Any assurance statements require separate counsel and auditor engagement.
Contact
Privacy enquiries (placeholder): privacy@example.com. Replace with your operational address before go-live.
See also Terms of Service.