Privacy Policy
Clause5afe's current public privacy policy is effective April 8, 2026. Changes to hosting, analytics, forms, public-assistant, enrichment, careers, client-access, and diligence data flows are reviewed against the public notice before activation.
Current public policy · April 8, 2026
The sections below summarize the substance of the current public policy. They do not expand the Company's legal rights beyond that policy or a later approved production notice.
Clause5afe may collect information voluntarily provided through inquiries, meeting requests, job applications, subscriptions, email, phone, and other direct correspondence, including identity, business contact information, organization information, and information you choose to provide about AI systems or governance needs.
The current policy permits collection of technical information such as IP address, browser and operating-system information, device identifiers, pages viewed, referring URLs, navigation paths, cookies, and similar technologies used for site functionality and analytics.
The current policy permits information from sales and marketing intelligence providers, public databases, professional networking services, and partners, used to supplement records and support legitimate business activity.
Purposes include responding to inquiries, scheduling meetings, evaluating prospective certification engagements, processing candidates, improving services and website experience, providing appropriate communications, complying with legal obligations, enforcing rights, and preventing fraud, security threats, or misuse.
For jurisdictions using GDPR-style legal bases, the current policy identifies consent, contract or pre-contract steps, legitimate interests subject to individual rights, and legal obligations as potential bases depending on the processing activity.
Clause5afe states that it does not sell personal information. The current policy permits appropriate sharing with service providers, professional advisers, parties to qualifying business transactions, authorities when legally required, and other parties when the individual has consented.
Information is retained for the period reasonably necessary for the stated purpose, legal obligations, and legitimate business needs. Clause5afe uses technical and organizational safeguards, while recognizing that no internet transmission or storage method can be guaranteed absolutely secure.
Depending on jurisdiction, individuals may have rights involving access, correction, deletion, restriction, portability, objection, direct marketing, and withdrawal of consent. California residents may have additional rights under applicable California privacy law.
Cookies and tracking
The current policy describes essential cookies as available by default and analytics technologies as consented. The website uses a versioned preference model with Necessary, Analytics, and Functional categories and first-party collection as the authoritative website-activity record.
When you allow Analytics, Vercel measures page visits, coarse traffic statistics, and real-user site performance. Arrivals through safeaiforeveryone.org may also be counted using a fixed domain label. This measurement excludes form contents, assistant conversations, URL fragments, and all query data except validated source, medium, and campaign labels. You can stop new optional measurement through Privacy choices.
Security, routing, preference storage, and other functions required for the site to operate.
Optional first-party measurement used to understand traffic, attribution, and content engagement after the applicable consent choice.
Optional features that may involve additional services, such as interactive public tools or approved assistant functionality.
Individual rights
Privacy and data-rights requests use a dedicated inquiry type rather than a generic marketing request. Applicable rights and response periods depend on jurisdiction and legal obligations.
Phone and text choices
Providing a phone number does not by itself authorize text messages. The forms present separate, unchecked choices for one-to-one follow-up and recurring informational or promotional texts.
Public website processing review
Each processing path receives a data inventory, purpose review, vendor review, retention decision, consent requirement, security treatment, and public-disclosure review before activation.
Children's privacy
The current policy states that Clause5afe's website and services are not directed to individuals under 18 and that Clause5afe does not knowingly collect personal information from children. The public-experience form requires an adult submitter and instructs people not to include a child's name or other identifying information.
Privacy request
Privacy requests require a controlled record, identity verification where necessary, response tracking, and a documented disposition.
