CLM One ← Back to home

Privacy Policy

Last updated: June 20, 2026

CLM One ("we", "our", or "us") operates the CLM One contract lifecycle management platform. This Privacy Policy explains how we collect, use, and protect information about you when you use our services.

1. Information We Collect

We collect information you provide directly, including:

  • Account registration details (name, email address, organisation name)
  • Contract and document data you upload or create within the platform
  • Billing and payment information (processed by our payment provider; we do not store raw card numbers)
  • Communications you send to our support team

We also collect usage data automatically, including IP addresses, browser type, pages visited, and feature usage patterns, to improve the platform.

2. How We Use Your Information

  • To provide, operate, and maintain the CLM One platform
  • To process transactions and send billing-related communications
  • To send product updates, security alerts, and support messages
  • To detect and prevent fraud, abuse, or violations of our Terms
  • To comply with legal obligations, including IOLTA compliance requirements

3. Data Sharing

We do not sell your personal data. We share information only with:

  • Service providers who help us operate the platform (hosting, email, payment processing, error tracking) under strict data processing agreements
  • Legal authorities when required by law or valid legal process
  • Successor entities in the event of a merger, acquisition, or sale of assets, with prior notice to affected users

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for longer periods where required by law (e.g., financial records, audit logs).

5. Security

We implement industry-standard security measures including encryption in transit (TLS), role-based access controls, and comprehensive audit logging. We conduct regular security reviews. No method of transmission or storage is 100% secure; we encourage you to use strong passwords and enable two-factor authentication.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data. To exercise any of these rights, contact us at the address below. We will respond within 30 days.

7. Cookies

We use essential session cookies required for authentication and security. We do not use third-party advertising cookies. You can control cookie settings through your browser, though disabling essential cookies will prevent you from signing in.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before they take effect.

9. Contact

If you have questions about this Privacy Policy, contact us at privacy@clmone.com.