Privacy Policy

1. Introduction

ClearSanction ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our politically exposed persons (PEP) and sanctions screening platform.

Please read this Privacy Policy carefully. By accessing or using our service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, company name, job title, and password
• Payment Information: Billing details processed securely through our payment processor (Paddle)
• Search Data: Names, entities, and related information you search for within our platform
• Communications: Information you provide when contacting our support team

2.2 Automatically Collected Information

When you use our service, we automatically collect:

• Usage Data: Features used, search queries, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Access times, error logs, and performance metrics
• Cookies: Session cookies and preferences (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and manage your subscription
• Conduct PEP and sanctions screening searches on your behalf
• Send administrative information and service updates
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations and regulatory requirements

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party vendors who perform services on our behalf (payment processing, hosting, analytics)
• Legal Requirements: When required by law, subpoena, or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition
• With Your Consent: When you explicitly authorize us to share information

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• SOC 2 Type II and ISO 27001 compliance
• Employee training on data protection best practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory obligations
• Resolve disputes and enforce our agreements

When your account is deleted, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes (e.g., audit trails for compliance).

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal information
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limitation of processing

To exercise these rights, please contact us at privacy@clearsanction.com.

8. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), we process your personal data based on:

• Contract: Performance of our service agreement with you
• Legitimate Interests: Improving our services and preventing fraud
• Legal Obligation: Compliance with applicable laws
• Consent: Where you have provided explicit consent

You have the right to lodge a complaint with your local data protection authority.

9. CCPA Compliance (California Users)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information to third parties.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses approved by the EU Commission
• Adequacy decisions by relevant authorities
• Other legally recognized transfer mechanisms

11. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of our service after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: