Last updated: February 22, 2026

Privacy Policy

This Privacy Policy explains how cDiscovery.io ("we," "us," or "our"), operated by Clay Cash, collects, uses, and protects information when you visit our website and use our services, including the AI-powered Knowledge Bot.

We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), Japan's Act on Protection of Personal Information (APPI), and other applicable regional privacy frameworks.

1. Data Controller

Clay Cash is the data controller for personal data processed through this website.

Contact: clay.cash@cdiscovery.io

2. Information We Collect

2.1 AI Chatbot Messages

When you use the Knowledge Bot, your messages are sent to Anthropic's Claude API for processing. We do not store your chat messages. Messages are transmitted in real time to Anthropic for AI response generation and are not retained on our servers. Anthropic's own data processing policies apply to how they handle these messages. You can review Anthropic's Privacy Policy for details.

2.2 Server Logs & IP Addresses

Our hosting provider (Vercel) may collect standard web server logs, including IP addresses, browser type, referring pages, and timestamps. We use IP addresses for in-memory rate limiting of the chat API to prevent abuse. IP addresses used for rate limiting are not persisted to disk or any database — they exist only in temporary server memory and are cleared when the serverless function recycles.

2.3 Information We Do NOT Collect

• We do not use analytics or tracking scripts (no Google Analytics, no Facebook Pixel, etc.)
• We do not set first-party cookies
• We do not collect names, email addresses, or any form submissions (there are no forms on this site)
• We do not use fingerprinting or any behavioral tracking technology
• We do not sell, rent, or share personal data with third parties for marketing purposes

3. AI Data Processing Disclosure

This site features an AI-powered chatbot ("Knowledge Bot") that uses Anthropic's Claude language model. When you send a message to the bot:

• Your message is sent from your browser to our serverless API function hosted on Vercel
• Our API forwards your message to Anthropic's Claude API for processing
• The AI-generated response is streamed back to your browser
• We do not store, log, or retain any conversation data
• Anthropic processes the data according to their Privacy Policy and API Usage Policy
• Anthropic states that data sent through their API is not used to train their models

Do not enter sensitive personal information, confidential data, or legally privileged material into the chatbot. While we do not store messages, they are transmitted to a third-party AI service for processing.

4. Third-Party Services

This site uses the following third-party services that may process limited data:

• Anthropic (Claude API) — AI language model for chatbot responses. Messages are sent to Anthropic's servers in the United States.
• Vercel — Website hosting and serverless functions. Vercel may collect server logs and set infrastructure cookies. See Vercel's Privacy Policy.
• Google Fonts — Web fonts loaded from Google's CDN. Google may collect usage data. See Google's Privacy Policy.
• Tailwind CSS CDN — CSS framework loaded from cdn.tailwindcss.com.
• YouTube — Thumbnail images are loaded from img.youtube.com. YouTube/Google may collect data when these images load. See Google's Privacy Policy.

5. Cookies & Local Storage

This site does not set first-party cookies. We use browser localStorage solely to remember your cookie consent preference. Third-party services (Vercel, Google Fonts) may set their own cookies for operational purposes. You can manage cookies through your browser settings.

6. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA), United Kingdom, and Switzerland, we process data under the following legal bases:

• Legitimate interest (Article 6(1)(f) GDPR) — for operating the website, serving web pages, and rate limiting to prevent abuse
• Consent (Article 6(1)(a) GDPR) — when you choose to use the AI chatbot, you consent to your messages being processed by Anthropic's Claude API

7. Your Rights

7.1 Rights Under GDPR (EEA, UK, Switzerland)

You have the right to:

• Access — request a copy of personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request restriction of processing
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — withdraw consent at any time (by simply not using the chatbot)
• Lodge a complaint — file a complaint with your local data protection supervisory authority

Since we do not store chat messages or personal data, most of these rights are satisfied by default. If you have questions or wish to exercise your rights, contact us at clay.cash@cdiscovery.io.

7.2 Rights Under CCPA/CPRA (California, USA)

California residents have the right to:

• Know what personal information is collected and how it is used
• Request deletion of personal information
• Opt out of the sale or sharing of personal information — we do not sell or share personal information
• Non-discrimination for exercising privacy rights

7.3 Rights Under Other Frameworks

• Canada (PIPEDA) — You may request access to and correction of your personal information
• Japan (APPI) — You may request disclosure, correction, or deletion of personal data
• Singapore (PDPA) — You may request access to and correction of personal data
• Australia (Privacy Act) — You may request access to and correction of personal information
• Brazil (LGPD) — You have rights to access, correction, anonymization, and deletion of personal data
• South Korea (PIPA) — You may request access, correction, suspension of processing, and deletion

8. International Data Transfers

Your data may be transferred to and processed in the United States, where Anthropic and Vercel operate. For EEA/UK residents, these transfers are conducted under appropriate safeguards, including standard contractual clauses where applicable.

9. Data Retention

• Chat messages: Not stored. Processed in real time and not retained.
• Rate limiting data: Held in temporary server memory only. Cleared automatically.
• Server logs: Retained by Vercel per their standard data retention policy.
• Cookie consent preference: Stored in your browser's localStorage until cleared by you.

10. Data Security

We implement appropriate technical measures to protect data during transmission, including HTTPS encryption for all connections. The API serverless function processes messages in isolated execution environments. However, no method of electronic transmission is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

This website is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided personal information through our chatbot, please contact us and we will take steps to address the concern.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions, data access requests, or to exercise your rights under any applicable privacy law:

Clay Cash
Email: clay.cash@cdiscovery.io
Website: cdiscovery.io