Privacy Policy

CLM (“we”, “our”, “us”) is the operator of the CLM API service and this website. For the purposes of the EU General Data Protection Regulation (GDPR) and applicable data protection law, we act as the data controller for personal data collected through this site.

Contact: info@clm-lang.com

We collect personal data only when you actively provide it:

• Waitlist sign-up: name, work email address, company name, and intended use case.
• Support or contact: any information you include in messages sent to us.

We do not automatically collect analytics, advertising identifiers, or fingerprinting data. Our website uses only essential cookies required for the site to function (see Section 6).

The public demo endpoint used by the landing page and dashboard playground (“Demo”) does not store the text, transcripts, prompts, or structured data you submit to it. Input is held in memory only for the duration of the request, processed to produce a compressed output, and discarded once the response is returned. It is never written to a database, logged to disk, retained for debugging, or used to train models.

The only thing we retain from Demo usage is your IP address and a request timestamp, held in memory for up to 60 seconds, solely to enforce the per-IP rate limit (5 requests/minute). This is never persisted or written anywhere.

This is distinct from the authenticated production API, where tenants provide their own API keys and requests are processed under the terms of their service agreement.

We rely on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): Waitlist sign-up and any marketing communications — you may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f)): Preventing fraud and maintaining the security of our systems.

• To notify you when early API access opens.
• To send you product updates if you have consented.
• To respond to support requests.
• To detect and prevent abuse.

We never sell your personal data to third parties.

We use a single essential cookie to remember your cookie-consent preference. This cookie does not contain personal data and is not used for tracking or advertising. It expires after 12 months.

We do not use Google Analytics, Meta Pixel, or any other third-party tracking scripts.

Waitlist data is retained until 30 days after the waitlist closes or, if you withdraw consent, within 30 days of your request. Support correspondence is retained for 2 years. Demo/playground input is never retained (see Section 3).

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time without affecting prior processing.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, email info@clm-lang.com. We will respond within 30 days.

We store and process data within the European Union. If a transfer outside the EU is required, we ensure adequate safeguards are in place (e.g., EU Standard Contractual Clauses).

We may use a transactional email provider to send waitlist notifications. These providers act as data processors under a Data Processing Agreement and are contractually prohibited from using your data for their own purposes.

We may update this policy from time to time. Material changes will be notified to waitlist members by email. The “last updated” date at the top of this page reflects the most recent revision.