M'Clime Privacy Policy

Website and Services Version

Effective Date: 27 March 2026

1. Introduction

This Privacy Policy explains how M'Clime ("M'Clime," "we," "us," or "our") collects, uses, stores, processes, protects, discloses, and retains information when you access or use our website, platform, software, artificial intelligence features, document search tools, APIs, communication features, and related products and services that link to this Privacy Policy (collectively, the "Services").

M'Clime is a document intelligence platform that helps users upload, organize, search, review, and interact with documents using automated and AI-assisted features. By accessing, registering for, purchasing, uploading to, or using the Services, you acknowledge that your information will be handled as described in this Privacy Policy and our Terms of Service.

If you use the Services on behalf of a company, LLP, partnership, firm, trust, fund, institution, or other legal entity, you represent that you have authority to provide information and upload documents on behalf of that entity, and that all required permissions, notices, consents, and legal bases have been obtained.

M'Clime operates from Surat City, Gujarat, India. You may contact us at notifications@mclime.ai.

2. Information We Collect

We may collect information that you provide directly, information generated through your use of the Services, and information received from third-party services that you choose to connect or enable. This may include your name, email address, phone number, organization name, role, account credentials, workspace details, billing details, communication preferences, and other account or onboarding information.

When you use M'Clime, you may upload or submit documents, files, text, prompts, messages, images, PDFs, spreadsheets, scans, business records, financial records, contracts, invoices, identity documents, compliance records, personal records, or other materials. These materials may contain personal data, confidential information, financial information, sensitive information, or third-party data. You are responsible for ensuring that you have the lawful right and authority to upload, store, search, review, analyze, and process such content through the Services.

We may also collect prompts, questions, search queries, instructions, feedback, generated outputs, document references, annotations, export actions, usage information, device information, browser type, IP address, operating system, app version, login events, service activity, error logs, diagnostic information, payment status, invoices, and support communications.

When documents are uploaded or used through the Services, M'Clime may create or process related technical, operational, and document-management information needed to provide the Services, improve reliability, maintain security, support user-requested features, and administer accounts.

3. Aadhaar and Identity Documents

M'Clime is not an Aadhaar authentication agency, KYC utility, government identity verification provider, or licensed Aadhaar authentication service unless expressly stated in writing. You should not upload Aadhaar, PAN, passport, voter ID, driver's license, or other identity documents unless you have a lawful and necessary reason to do so.

If you choose to upload Aadhaar or other identity documents, you acknowledge that these documents may contain highly sensitive personal information. We strongly recommend uploading only masked Aadhaar copies wherever possible. By uploading such documents, you are responsible for ensuring that the upload and processing are lawful, authorized, and appropriate for your use case.

Where Aadhaar or identity documents are uploaded as user content, we process them at your instruction only to provide, maintain, secure, support, and administer the Services, subject to this Privacy Policy, our Terms of Service, and applicable law. We may restrict, reject, quarantine, remove, or require deletion of identity documents where we believe continued processing creates legal, privacy, security, or operational risk.

4. How We Use Information

We use information to provide, operate, maintain, secure, support, and improve the Services. This includes creating and managing accounts, authenticating users, enabling document upload and storage, allowing users to search and review documents, generating AI-assisted responses and summaries, supporting workspace features, processing exports, enabling user-requested integrations, responding to support requests, and managing billing.

We may use user content, prompts, document information, and account activity to generate automated outputs such as answers, summaries, document references, extracted information, labels, search results, and other document-related responses. These outputs are intended to assist document review and retrieval, but they may be incomplete, incorrect, outdated, misleading, or contextually wrong. You are responsible for reviewing and verifying important outputs before relying on them.

We may also use information to monitor service performance, debug errors, detect misuse, prevent fraud, protect accounts, enforce usage limits, improve service quality, troubleshoot issues, develop features, comply with legal obligations, preserve records, enforce our Terms of Service, defend legal claims, and protect the rights, safety, and security of M'Clime, our users, and others.

5. AI-Assisted Features

The Services may use automated systems and AI-assisted features to help process, search, summarize, organize, retrieve, and analyze documents. These features are provided to assist users, not to replace independent judgment, professional advice, or human review.

Unless we expressly state otherwise or separately agree in writing, we do not sell your uploaded documents or user content as content inventory, and we do not use your private uploaded documents to train general-purpose third-party AI models except where you expressly opt in or where a separate written agreement permits it.

Service performance, availability, latency, and output quality may vary over time. You remain responsible for verifying all outputs before using them for legal, financial, tax, compliance, medical, lending, operational, or other important decisions.

We may use aggregated, anonymized, or de-identified information for analytics, security, product improvement, service administration, and performance measurement, provided such information is not reasonably capable of identifying you or another individual.

6. Legal Basis and User Responsibility

Where applicable law requires a legal basis for processing personal data, we rely on one or more lawful grounds, including consent, performance of a contract, compliance with legal obligations, legitimate uses permitted by law, protection against fraud or security threats, and processing necessary to provide the Services requested by you or your organization.

If you upload personal data relating to employees, customers, clients, vendors, family members, counterparties, or other individuals, you are responsible for providing required notices, obtaining required consents, and ensuring that you have a lawful basis to process that information through the Services.

7. Cookies and Similar Technologies

We may use cookies, local storage, device identifiers, analytics tools, and similar technologies to keep you signed in, remember preferences, secure accounts, measure website performance, understand service usage, detect abuse, improve user experience, and support diagnostics. You may be able to control cookies through your browser settings, but disabling cookies may affect some features of the Services. Where required by law, we will obtain consent before using certain non-essential cookies or similar technologies.

8. How We Share Information

We do not sell your uploaded documents or user content. We may share information with trusted service providers who help us operate, secure, support, and improve the Services, including providers involved in hosting, storage, infrastructure, analytics, payment processing, communications, customer support, security, authentication, and other service operations. These providers may process information only as needed to provide services to us or as otherwise permitted by applicable law and contract.

If your account is part of an organization, workspace, team, enterprise account, or shared environment, information may be visible to account owners, administrators, authorized users, or other workspace participants depending on permissions and settings. Workspace administrators may be able to manage users, access documents, view activity, control integrations, export data, delete data, and manage billing.

We may also share information when you connect third-party services, invite collaborators, create shared links, export documents, request support, authorize disclosure, or otherwise direct us to share information.

We may disclose information where reasonably necessary to comply with law, respond to lawful requests, cooperate with courts or regulators, enforce our Terms, investigate misuse, prevent fraud, protect security, preserve evidence, defend legal claims, or protect the rights and safety of M'Clime, users, or others. We may also disclose or transfer information in connection with a merger, acquisition, financing, restructuring, sale of assets, investment, insolvency, reorganization, or similar corporate transaction.

9. International Data Processing

M'Clime operates from India, and information may be processed in India and other jurisdictions where we, our affiliates, infrastructure providers, or service providers operate. By using the Services, you acknowledge that information may be transferred to, stored in, or processed outside your country or region, subject to applicable law and contractual safeguards.

Unless we expressly agree otherwise in writing, we do not provide a general data-localization commitment for all users, plans, or Services. If you require specific data residency, localization, transfer restrictions, enterprise privacy commitments, or regulated-sector obligations, those must be agreed separately in writing.

10. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the Services, manage accounts, maintain security, comply with legal obligations, resolve disputes, process billing, prevent fraud, enforce agreements, and support business operations. Retention periods may depend on account status, subscription plan, workspace settings, deletion requests, backup cycles, legal obligations, security needs, and enterprise agreements, if any.

You may be able to delete documents, prompts, outputs, workspaces, or account information through the Services depending on your permissions and plan. You may also request deletion of your account and associated data from within the app or by contacting us at notifications@mclime.ai. Deletion may not be immediate across all systems, and copies may remain temporarily in backups, logs, archives, billing records, security systems, or legal-preservation systems. We may retain certain information where required or permitted for legal compliance, tax, billing, dispute resolution, fraud prevention, security investigations, or protection of rights.

11. Security

We use technical, administrative, and operational measures designed to protect information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, authentication systems, monitoring, security review, backup practices, vendor assessment, incident response procedures, and other reasonable safeguards appropriate to the nature of the Services.

No digital system is completely secure, and we cannot guarantee that unauthorized access, cyberattacks, data loss, or security incidents will never occur. You are responsible for using strong passwords, protecting login credentials, securing your devices and browsers, controlling workspace access, reviewing sharing settings, limiting unnecessary uploads, using masked documents where appropriate, and promptly notifying us of suspected compromise at notifications@mclime.ai.

If we become aware of a security incident involving personal data or customer data in our possession or control, we will take reasonable steps to investigate, contain, mitigate, and remediate the incident. Where required by applicable law, we will notify affected users, organizations, regulators, or authorities.

12. Your Rights and Choices

Depending on applicable law and your relationship with M'Clime, you may have rights to access, correct, update, delete, or request information about personal data. You may also have rights to withdraw consent where processing is based on consent, opt out of marketing communications, request grievance redressal, nominate another person to exercise rights where applicable law permits, or close your account.

To exercise rights or make a privacy request, contact us at notifications@mclime.ai. We may need to verify your identity, authority, or account ownership before responding. We may decline or limit requests where permitted by law, including where fulfilling the request would affect the rights of others, compromise security, conflict with legal obligations, or interfere with legitimate billing, fraud-prevention, dispute, or records-retention needs.

If your account is controlled by an organization, we may direct your request to that organization or require you to contact your workspace administrator.

13. Children's Privacy

The Services are intended for users who are at least eighteen (18) years old. We do not knowingly allow children to create accounts or use the Services directly. If user content contains personal data of children, you are responsible for ensuring that such upload and processing are lawful, authorized, and supported by all required consents, notices, and safeguards.

14. Professional, Regulated, and Sensitive Information

M'Clime may be used to process business, financial, legal, tax, accounting, employment, lending, property, compliance, identity, medical, insurance, or other sensitive documents. The Services are not legal, tax, accounting, medical, fiduciary, brokerage, escrow, investment advisory, or regulated professional services.

You are responsible for deciding whether the Services are suitable for your data types, sector, confidentiality obligations, professional standards, and regulatory requirements. Unless expressly agreed in writing, we do not represent that the Services satisfy any specific regulated-sector obligation, retention mandate, evidentiary standard, localization requirement, audit requirement, certification standard, or security framework.

15. Communications and Marketing

We may send you account notices, service updates, security alerts, billing messages, legal notices, support responses, product updates, and marketing communications where permitted by law. You may opt out of marketing emails by using the unsubscribe link or contacting us, but we may still send transactional, security, billing, legal, and service-related communications.

16. Sharing and Collaboration

The Services may allow you to share documents, outputs, folders, workspaces, links, or results with other users or third parties. You are responsible for selecting appropriate sharing settings, checking recipients, avoiding accidental disclosure, disabling links when no longer needed, reviewing workspace access, and ensuring that you have authority to share the information. We are not responsible for how recipients use, copy, download, forward, or disclose information that you choose to share.

17. Third-Party Cloud and AI Service Providers

M'Clime uses third-party service providers to operate and secure the app, including cloud infrastructure and AI model providers. Data is transmitted to these providers automatically when a user uploads a document or submits a query, only as needed to provide the requested app functionality.

M'Clime uses Google Cloud Platform and Amazon Web Services for cloud infrastructure, hosting, storage, security, and related backend operations. M'Clime uses OpenAI as an AI model provider to support AI-assisted document search and question-answering.

Depending on the feature used, data processed by these providers may include account information, uploaded documents, extracted document text, user questions or prompts, generated answers, and limited technical logs necessary to operate and secure the service.

These third-party providers are contractually bound to protect user data under terms providing the same or equivalent level of protection described in this Privacy Policy, and are prohibited from using user data to train third-party AI models. Documents you upload are stored on Google Cloud Platform and Amazon Web Services for as long as your account or the relevant content exists, or until you delete them, and are used only to host and secure your content — not to read or analyze it. When you ask a question, your query and relevant document text are sent to OpenAI to generate an answer; OpenAI does not use data submitted through its API to train its models and retains such data for up to 30 days for abuse monitoring before deleting it.

Before any data is sent for AI-assisted processing, the app displays an in-app disclosure and asks for your acknowledgement. M'Clime does not sell user data and does not use user documents for advertising. Third-party providers are used solely to provide, maintain, protect, and operate the app's services.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our Services, our business model, or our data practices. When we make material changes, we will post the updated Privacy Policy with a new effective date and may notify you by email, in-product notice, dashboard notice, or other reasonable means.

Your continued use of the Services after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy. If you do not agree with the updated Privacy Policy, you should stop using the Services and, where applicable, request account closure or data deletion.

19. Indian Law and Privacy Contact

Where applicable, personal data processed through the Services may be subject to the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and related rules, notifications, amendments, or subordinate legislation.

If you have questions, complaints, privacy requests, security concerns, or grievances regarding this Privacy Policy or our handling of information, you may contact us at notifications@mclime.ai. Please include enough information for us to understand and respond to your request. We may ask for additional information to verify your identity, authority, account ownership, or relationship to the relevant data.

Contact

M'Clime · Surat City, Gujarat, India

notifications@mclime.ai