Privacy policy

Draft v0.2, 2026-09-18. To be reviewed by counsel before the directory submission. Terms of use are at /terms.

What we collect

When you connect ClientGen to Claude we store your work email, your name, and your firm. When you use the connector we store the orders you draft and approve (template, recipients, your message, price), the compliance review tickets you submit, activity notes you ask us to record, the compliance ledger described in the docs, and an audit log of each tool call (tool name, timestamp, duration, and a one-way hash of the arguments, not the arguments themselves).

What we do not collect

We do not receive or store your Claude conversation, your Claude memory, your files, or any data from other connectors you use. Recipient records in ClientGen are the leads and contacts ClientGen sourced for you or you added.

How we use it

To fulfill the orders you confirm (printing and mailing through our print and mail vendors, handwriting through our handwriting vendor, placing ads through advertising platforms), to bill your ClientGen account, to support compliance review, and to keep the books-and-records trail your firm may require.

Sharing and subprocessors

Recipient names and mailing addresses on a confirmed order are shared with the vendor that fulfills that order and with no one else. For a household ad, the addresses on your own list are shared with our ad platform for household targeting, and with no one else. We do not sell data. We do not share data with Anthropic beyond what Claude requests through the connector on your behalf.

Subprocessors, by category. The named list is being finalized and will be published here before the first paid order: print and mail; handwriting; gifts; charitable donations; advertising platforms; transactional email; hosting and storage. Each one receives only the fields needed for its job.

Retention

The compliance ledger tables are backed up nightly to object storage under our control. Write-once archive records, the orders and review tickets behind them, and the audit log are kept for your firm's books-and-records period (six years after the order date to meet SEC expectations, or longer if your firm asks). Once your firm's archive address has been verified, each archive record is also journaled to that address, so your archive of record holds its own copy. Sign-in codes expire in 10 minutes. You can ask us to close your account and delete recipient records you added at any time; archive records are write-once and stay for the retention period.

Incidents

If we confirm a security incident that affects your data, we will notify your firm's designated contact within 72 hours of confirming it, with what happened, what was affected, and what we are doing about it.

Contact

support@clientgen.com