Privacy Policy

1 About CAMNY LTD and this notice

1.1 Who we are 

CAMNY LTD (“CAMNY”, “we”, “our”, “us”) is a private limited company registered in England & Wales (company no. [•••]) with its registered office at 20 Wenlock Road, London, N1 7GU.

1.2 What we do 

We provide AI-native legal-services software and attorney-review workflows (“Services”) via the domains clarisign.aiand camny.co (“Sites”) and through related mobile or desktop applications (“Apps”).

1.3 Why this notice matters 

This Privacy Policy explains what personal data we collect, how and why we process it, the lawful bases we rely on, the rights you have, and how you can exercise those rights.

It applies to:

• visitors to our Sites or Apps;

• registered users (clients, attorneys, collaborators);

• newsletter subscribers and event attendees;

• job applicants and contractors.

• 
  

1.4 Key laws we comply with

2 The data we collect and how we obtain it

(Internal reference keys A-1 … E-1 map to the lawful-basis table in § 3.2.)

3 Why we process your data and our lawful bases

3.1 Purpose matrix

3.2 Legal-basis table (UK GDPR / EU GDPR Article 6)

For residents of California, UK GDPR lawful bases align with “Business Purpose” or “Commercial Purpose” categories in CPRA § 1798.140.

4 Cookies, SDKs and similar technologies

4.1 Types used

• Essential cookies (session token, CSRF)

• Performance cookies (page-load timing)

• Functional cookies (language selection)

• Analytics SDKs (Plausible Analytics self-hosted)

• No third-party advertising cookies.

4.2 Opt-out / consent

On first visit we present a GDPR-compliant banner. Non-essential cookies are disabled until you click “Accept” or customise settings.

5 Data sharing and sub-processors

We update this table in real time at clarisign.ai/termsofuse.

6 International transfers

• All primary data reside in UK Amazon datacentres.

• When we engage a US sub-processor, we rely on SCCs and supplement with encryption in transit (TLS 1.3) and at rest (AES-256).

• We do not rely on Privacy Shield.

7 Retention schedule

8 Your rights

8.1 For UK / EU data subjects:

• Right of access (Art 15)

• Rectification (Art 16)

• Erasure / “right to be forgotten” (Art 17)

• Restriction (Art 18)

• Portability (Art 20)

• Objection (Art 21)

• No automated decision-making with legal effect (Art 22)

8.2 To exercise: e-mail privacy@clarisign.ai with subject line “Data-rights request” and include details to verify your identity. We respond within 30 days.

8.3 Complaints: You may lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local EU supervisory authority.

9 Security measures

• ISO 27001-aligned risk management programme.

• SOC 2 Type II audit in progress (expected Q3 2025).

• All traffic encrypted in transit (TLS 1.3 with HSTS).

• Data encrypted at rest (AES-256-GCM, AWS KMS).

• MFA enforced for admin accounts; optional for users.

• Daily off-site backups; quarterly disaster-recovery tests.

• Independent penetration testing every 12 months.

10 Children

Our Sites and Services are not directed to individuals under 18. We do not knowingly collect children’s data. If you believe a minor has provided personal data, contact privacy@clarisign.ai and we will delete it promptly.

11 Links to third-party sites

Our Sites may contain links to external sites (e.g., HM Land Registry, Companies House). We are not responsible for their content or privacy practices.

12 Changes to this Policy

Version 1.0 – 21 May 2025.

We will post any future changes at clarisign.ai/privacy and, for material changes, notify registered users by e-mail at least 14 days before they take effect.

13 Contact us

Data Controller 

CAMNY LTD

20 Wenlock Road

London, N1 7GU

United Kingdom

Data Protection Officer

Nikita Bezotosnyi

E-mail: privacy@clarisign.ai

Tel: +49 170 175 0619