Back to home

Privacy Policy

Last updated: July 2026

ClaimsEvidence GmbH (“ClaimsEvidence”, “we”, “our”, or “us”) respects your privacy. This policy explains what personal data this website collects, why we collect it, and the rights you have over it.

Please read this carefully: this policy covers our public website. Our patent-analysis platform is currently an internal, early-access tool that is not generally available, and you cannot sign up for or upload data to it from this website. The website itself has no user accounts, no document or patent uploads, and no payment processing, and we do not store your personal data in a database through it. The only personal data we handle via this website is what you voluntarily submit through our newsletter and contact forms, plus standard analytics described below. If and when we open the platform to users, we will update this policy to cover the data it processes.

We may update this policy as our website and offering evolve. If we make a material change, we will post the updated policy here and, where we have your email and the change affects you, give you at least 30 days’ notice before it takes effect. The “Last updated” date above always reflects the current version.

This policy is written primarily around the EU General Data Protection Regulation (GDPR), which applies to us. If you are a resident of California, you also have rights under the California Consumer Privacy Act (CCPA); the rights described in the “Your Rights” section below apply to you in substance, and we do not sell your personal data.

Our website is not directed to children, and we do not knowingly collect personal data from anyone under the age of 18.

1. Data Controller

The controller responsible for your personal data is ClaimsEvidence GmbH, Leopoldstraße 31, 80802 Munich, Germany. Full provider details are in our Impressum. For any privacy matter you can reach us at founders@claimsevidence.com.

2. Types of Data We Collect

We only collect a limited set of data, and most of it is information you choose to give us:

  • Personal data you submit through forms. Through our newsletter signup we collect your email address (required) and, optionally, your first name. Through our demo / contact form we collect your email address (required) and, optionally, your name, company, role, area of interest, and any free-text message you write.
  • Technical information. Like most websites, our hosting and analytics providers receive standard request data such as your IP address, browser and device type, and the pages you visit. This is used to keep the site running and to understand aggregate usage.
  • Cookies and similar technologies.By default our analytics run in a cookieless, anonymous mode. Cookies and local storage (including anonymized session insights) are only used if you actively consent. See the “Cookies and Analytics” details in section 3.

We do not ask you to upload documents, we do not collect payment information, and we do not store your form submissions in our own database. Form submissions are handled by our email provider on our behalf (see section 4 and the subprocessors page).

3. How We Use Your Data and Our Legal Basis

Under the GDPR we must have a legal basis for processing your personal data. The table below summarizes what we do and why:

  • Newsletter. We use your email and optional first name to send you our practice-note newsletter. Legal basis: your consent (GDPR Art. 6(1)(a)), which you give by signing up. You can withdraw it at any time using the one-click unsubscribe link in every email, with no effect on emails already sent.
  • Demo and contact requests. We use the details you submit to respond to your enquiry and to follow up about a possible demo or working relationship. Legal basis: taking steps at your request prior to entering an arrangement and our legitimate interest in responding to and managing enquiries (GDPR Art. 6(1)(b) and Art. 6(1)(f)).
  • Cookies and analytics. We use PostHog to understand how visitors use the site so we can improve our content. If you are in the EU, EEA, or UK, we ask for your consent before any analytics cookies are set (GDPR Art. 6(1)(a)): until you choose, PostHog runs in a cookieless, anonymous mode, and it only uses cookies and local storage (including anonymized session insights) if you accept. Visitors outside those regions have analytics enabled by default and can opt out at any time. We also use Vercel Analytics, which collects aggregate, cookieless usage metrics and does not identify individual visitors. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer, and declining does not affect your use of the site.
  • Site operation and security. Our hosting provider processes technical request data to serve the site, keep it available, and protect it against abuse. Legal basis: our legitimate interest in running a secure, reliable website (GDPR Art. 6(1)(f)).

To keep our server logs free of recoverable email addresses, any email addresses that appear in our application logs are hashed with SHA-256 before storage.

4. Data Recipients and Sharing

We do not sell your personal data, and we do not share it for advertising. We share data only with the trusted service providers (subprocessors) that operate this website on our behalf — an email provider, a product-analytics provider, and a hosting provider — each of which processes your data only to provide its service to us and under contractual data-protection terms. The full list, including what each one processes and links to their privacy policies, is on our subprocessors page.

We may also disclose personal data where we are legally required to do so — for example to comply with a valid legal request, a court order, or applicable law, or to protect our rights, safety, or property.

5. International Transfers

We aim to keep processing within the EU/EEA where practical — for example, our analytics provider hosts data in its EU cloud. Some of our providers are based in, or may process data in, countries outside the EEA. Where that happens, we rely on appropriate safeguards recognized under the GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs) or an adequacy decision, so that your data continues to receive an equivalent level of protection. Each provider’s privacy policy, linked from our subprocessors page, sets out the safeguards it applies.

6. Data Retention

We keep your personal data only as long as needed for the purpose it was collected. Newsletter details are retained until you unsubscribe or ask us to remove them. Demo and contact enquiries are retained for as long as needed to handle the conversation and any follow-up, and then deleted when no longer required. Hashed log data and aggregate analytics are retained for limited periods in line with our providers’ defaults. When data is no longer needed, we delete it or it expires automatically.

7. Your Rights

If you are in the EEA or the UK, you have the following rights over your personal data, which you can exercise at any time:

  • Access — ask what personal data we hold about you and get a copy.
  • Rectification — have inaccurate or incomplete data corrected.
  • Erasure — ask us to delete your personal data.
  • Restriction — ask us to limit how we use your data.
  • Portability — receive the data you gave us in a portable, machine-readable format.
  • Objection — object to processing based on our legitimate interests.
  • Withdraw consent — withdraw any consent you have given (such as for the newsletter or for analytics cookies) at any time, without affecting processing already carried out.

To exercise any of these rights, email us at founders@claimsevidence.com. You can unsubscribe from the newsletter at any time using the link in every email.

8. Right to Complain

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with a data-protection supervisory authority. As we are based in Munich, the competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht). You may also contact the supervisory authority in your own country of residence or place of the alleged infringement. We would, of course, appreciate the chance to address your concern first.

9. Security

We take reasonable technical and organizational measures to protect your personal data, and we work only with reputable providers who maintain their own security practices. As noted above, email addresses are hashed in our logs. No method of transmission or storage over the internet is completely secure, so while we strive to protect your data we cannot guarantee absolute security. Legal basis for these measures: our legitimate interest in keeping your data and our website secure (GDPR Art. 6(1)(f)).

Contact

For any privacy-related question or to exercise your rights, contact us at founders@claimsevidence.com.