1. Who we are
Claris is a legal AI platform that helps individuals and SMEs submit and process legal matters. Claris operates via the platform at clarisloket.com.
For the processing of your personal data, Claris acts as the data controller within the meaning of the General Data Protection Regulation (GDPR).
2. What data do we collect?
2.1 Intake data (clients)
When you submit a matter, we collect:
- Name, email address, telephone number
- Postal code and place of residence
- Type of applicant (individual or business) and organisation name where applicable
- Description of the legal problem and situation
- Financial data (claim amount, damages)
- Relevant dates (decision date, deadline)
- Steps already taken
2.2 Payment data
Payments are processed via Mollie B.V. Claris receives only a payment confirmation — no bank details or card information. Mollie is responsible for the secure processing of payment data.
2.3 Chat messages (AI Advisor)
Messages you exchange with the Claris AI Advisor are stored to preserve conversation history and to support you during your matter.
2.4 Uploaded documents
Documents you upload in connection with your matter (contracts, invoices, correspondence) are stored in your case file.
2.5 Partner data (professionals)
When registering as a Claris partner, we collect:
- Name, email address, telephone number
- Chamber of Commerce (KvK) number, bar / file number
- Office and address details
- Specialisations and regions
- Source information (UTM parameters when registering via advertisements or email campaigns)
2.6 Technical data
When you use the platform, the following are recorded automatically:
- IP address (anonymised)
- Browser type and device
- Session information
3. What do we use your data for?
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing your legal intake request | Performance of a contract (Art. 6(1)(b)) |
| Providing AI advice via the Claris Advisor | Performance of a contract |
| Creating and managing your case file | Performance of a contract |
| Processing payment | Performance of a contract |
| Matching your matter to a legal professional | Performance of a contract |
| Sending confirmation and status emails | Performance of a contract |
| Managing partner applications | Performance of a contract / Legitimate interests |
| Improving the platform and AI model | Legitimate interests |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. AI processing — Anthropic Claude
The Claris AI Advisor and AI Lab are powered by Claude, an AI model from Anthropic, PBC (United States). When you use the AI Advisor, relevant parts of your matter description and chat messages are processed via the Anthropic API.
We have entered into a data processing agreement (DPA) with Anthropic in accordance with GDPR Article 28. Anthropic processes this data solely to provide services to Claris and does not use your data to train models without your explicit consent.
More information: anthropic.com/privacy
5. Who do we share your data with?
Claris shares your personal data with third parties only where necessary for the provision of services:
| Processor | Role | Location |
|---|---|---|
| Supabase Inc. | Database storage and authentication | EU (Frankfurt) |
| Anthropic, PBC | AI processing (Claude API) | US (DPA in place) |
| Mollie B.V. | Payment processing | NL / EU |
| Resend Inc. | Email delivery | EU |
| HubSpot Ireland Ltd. | CRM for partner acquisition | EU1 (Dublin) |
| Vercel Inc. | Hosting and deployment | EU region |
Data processing agreements are in place with all processors. Data is not sold to third parties and is not used for third-party advertising purposes.
Your matter data is shared with the legal professional assigned to your matter, to the extent necessary for handling your case.
6. How long do we retain your data?
| Category | Retention period |
|---|---|
| Intake data and case file | 7 years after closure of the matter (statutory retention obligation) |
| Chat messages (AI Advisor) | 2 years after last activity |
| Uploaded documents | 7 years after closure of the matter |
| Payment data (confirmations) | 7 years (tax retention obligation) |
| Partner data (active partners) | Duration of the partnership + 2 years |
| Partner data (rejected applications) | 6 months after decision |
| Technical log data | 90 days |
After the retention period expires, your data is automatically deleted or anonymised.
7. Security
Claris implements appropriate technical and organisational measures to protect your personal data:
- Encrypted connections (HTTPS/TLS) for all data transport
- Row Level Security (RLS) on all sensitive database tables
- Access control via unique case tokens per client
- Hashed access tokens in the database
- HMAC-signed download links for documents
- Restricted access to production data (authorised staff only)
8. Your rights
Under the GDPR, you have the following rights:
Right of access (Art. 15 GDPR)
You may request information about which personal data we process about you.
Right to rectification (Art. 16 GDPR)
You may have inaccurate data corrected.
Right to erasure (Art. 17 GDPR)
You may request deletion of your data, unless statutory retention obligations apply.
Right to restriction of processing (Art. 18 GDPR)
You may request that processing be temporarily restricted.
Right to data portability (Art. 20 GDPR)
You may request your data in a structured, commonly used format.
Right to object (Art. 21 GDPR)
You may object to processing based on legitimate interests.
You may submit requests via privacy@clarisloket.com. We respond within 30 days.
9. Complaints
If you have a complaint about how we process your personal data, please contact us at privacy@clarisloket.com.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
Website: autoriteitpersoonsgegevens.nl
Telephone: 088 – 1805 250
10. Cookies
Claris uses only functional cookies necessary for the platform to work (session management, case access). No tracking or advertising cookies are placed without your consent.
11. Changes
Claris reserves the right to amend this privacy policy. In the event of material changes, you will be notified by email or via the platform. The current version is always available at clarisloket.com/privacy.
12. Contact
Claris — trade name of AVL Consultancy
Chamber of Commerce: 52267148
Email: privacy@clarisloket.com
Platform: clarisloket.com