Legal
Privacy Policy
Last updated: May 19, 2025
Clinch ("we", "us", or "our") operates the Clinch platform available at useclinch.com. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using Clinch, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign up via Google OAuth, we receive your name and email from Google.
Profile Data
To generate proposals, you may optionally provide: a professional bio, a list of services you offer, past project descriptions, and a portfolio URL. This data is stored in your account and used solely to personalise your AI-generated proposals.
Proposal and Invoice Content
We store the proposals and invoices you create, including job descriptions you paste, client names, client email addresses, project details, and pricing information. This content is private to your account.
Usage Data
We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. We use this to maintain service reliability and diagnose errors.
Payment Information
If you upgrade to Pro, payments are processed by Stripe. We do not store your full card number, CVV, or billing address. Stripe provides us with a tokenised representation of your payment method and your subscription status.
2. How We Use Your Information
- To create and manage your account
- To generate AI-powered proposals using your profile and job description input
- To send transactional emails (invoice notifications, password reset, proposal updates)
- To enforce usage limits based on your subscription tier
- To detect and prevent fraud or abuse
- To improve the product through aggregated, anonymised analytics
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
3. AI Processing (OpenAI)
Clinch uses the OpenAI API to generate proposal content. When you generate a proposal, the following data is sent to OpenAI:
- The job description you paste or enter
- Your professional bio, services, and past project descriptions
- The pricing mode, currency, and budget/rate you provide for that proposal
OpenAI processes this data to return a JSON proposal. As of March 2023, OpenAI's API does not use data submitted via the API to train its models. You can review OpenAI's data usage policies at openai.com/policies.
4. Data Storage and Security
Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. Data in transit is encrypted with TLS. Data at rest is encrypted by Supabase's default storage encryption.
We take reasonable technical and organisational measures to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
5. Third-Party Services
We use the following third-party services to operate Clinch:
| Service | Purpose |
|---|---|
| Supabase | Database, authentication, file storage |
| OpenAI | AI proposal generation |
| Stripe | Payment processing (Pro subscriptions) |
| Vercel | Hosting and edge network |
| Resend / SMTP | Transactional email delivery |
6. Cookies
Clinch uses session cookies to keep you logged in. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but doing so will prevent you from staying logged in.
7. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g., financial records for tax purposes, which may be retained for up to 7 years).
8. Your Rights
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request that we correct inaccurate data
- Deletion — request that we delete your account and data
- Portability — request an export of your proposals and invoices
- Objection — object to our processing of your data
To exercise any of these rights, email us at hello@useclinch.com. We will respond within 30 days.
9. Children's Privacy
Clinch is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email or by a prominent notice in the app. Continued use of Clinch after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
For any privacy-related questions or requests, contact us at: