Last updated: 2026-06-14
The controller responsible for processing is Claraven, contactable at support@claraven.com. See the Impressum.
To produce research and drafts, the content you submit is sent to the processors below. We have (or will have before launch) a Data Processing Agreement with each.
| Sub-processor | Purpose | Region |
|---|---|---|
| Anthropic (via OpenRouter) | LLM that generates reports/contracts | US |
| Tavily | Live legal-source web search | US |
| Stripe | Subscription payments & invoicing | EU/US (SCCs) |
| Hetzner | Hosting of the application & database | EU (Germany/Finland) |
| Resend (Resend, Inc.) | Transactional & product email (verification, password reset, occasional re-engagement) | EU (Ireland) |
Claraven uses no advertising or tracking cookies and no third-party analytics. To understand how many people visit the site we use a privacy-friendly, cookieless, first-party page-view count hosted on our own EU server: we record only the page visited, an aggregate traffic source (e.g. "instagram"), and an approximate country. To count unique visitors we derive a daily-salted one-way hash of the IP address and store only that hash, the raw IP is never stored, and the salt rotates every day so the hash cannot follow anyone across days. The country is looked up from the IP using an offline database (IP geolocation by DB-IP) and we keep only the 2-letter country code, again, the IP is not stored. We set no cookies and use no cross-site identifier, so this needs no consent banner. The only data kept in your browser is the login token required to operate your account (strictly necessary). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Your documents are not used to train any AI model. Confirm the exact processing regions and complete the DPAs before relying on the EU-residency statement shown in the app footer.
If you registered but haven't started using Claraven, we may send you an occasional (about once a month) re-engagement email reminding you of the service, written in your account language. This is direct marketing to an existing user relationship. Legal basis: our legitimate interest in re-activating registered users (Art. 6(1)(f) GDPR; soft opt-in). We do not send these to anyone who is currently subscribed, who hasn't verified their email, or who has unsubscribed.
Every such email contains a one-click unsubscribe link that stops all further marketing email immediately, transactional emails (verification, password reset, billing) are unaffected. You can also object at any time by emailing support@claraven.com. See the Impressum for the sender's identity and contact details.
You can describe your situation and get a first answer without creating an account. Because a legal description can reveal special categories of data (Art. 9 GDPR), we process this anonymous text only after you give explicit consent (the checkbox next to the input). Legal basis: your explicit consent (Art. 9(2)(a) GDPR). The text is sent to our AI sub-processor (see the table above) to generate the response; for the anonymous preview we do not run live web search.
An anonymous draft is identified only by a random token stored in your browser, never linked to your identity. If you do not create an account, the draft is automatically deleted within about 48 hours. If you sign up, the draft is moved to your account and the normal account rules apply. You can withdraw consent at any time by simply not signing up (the draft then expires) or by emailing support@claraven.com.
We keep your account and content for as long as your account exists. Billing records are kept as long as legally required (e.g. 7 years under Austrian tax law). You can delete your account and all associated data at any time via Settings → Delete account.
For any privacy request, contact support@claraven.com.
See also: Terms & Conditions · Impressum · Right of withdrawal.
← Back to Claraven