Last updated: October 7, 2026
Clauseloop ("we", "us") is an ISO certification management platform operated by SWC Group. This policy explains how we handle personal data when you use our website and platform at crm.avantcert.com.
We collect information you provide directly — your name, email address, company details, and the business data you enter into the platform, such as leads, projects, audits, and invoices.
We also collect limited usage data, such as login times, feature usage, and pages visited, to operate and improve the service.
We use your information to provide and improve the certification management service, process transactions, send service-related communications, and keep the platform secure.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
The platform runs on our own servers at Oracle Cloud Infrastructure in India, including its database (PostgreSQL, run with Supabase's open-source software) and uploaded files.
We also use Cloudflare for DNS and delivery, Resend for email, Google Analytics on our public website only, Google Calendar and Search Console only if you connect them, PostHog (EU) for product analytics in the application, Sentry for error reports, and Stripe, PayPal, and Cashfree for payments. Our Trust Center keeps the current list and what each provider receives.
AI drafting is switched off, and no personal data is sent to any AI provider.
Each provider processes data only as needed to deliver its function, under its own security and privacy commitments.
Data is stored in PostgreSQL on our own servers, with row-level security policies that isolate data between organizations and roles. Connections from your browser are encrypted with TLS, the servers' disks are encrypted at rest, and sensitive credentials such as calendar tokens are encrypted again before they are stored.
We apply role-based access controls, keep an audit log of privileged actions, rate-limit sensitive endpoints, and report application errors to Sentry. See our Trust Center for more detail, including what is not in place yet.
Card payments are processed by PCI-DSS-compliant providers (Stripe, PayPal, and Cashfree). We do not store full card numbers on our systems.
You have the right to access, correct, export, and delete your personal data. You can export your data from the platform or contact us, and we will respond within 30 days.
Depending on your location, you may have additional rights under laws such as the GDPR or India's Digital Personal Data Protection Act.
We retain your data while your account is active. After account deletion, personal data is anonymized or deleted within 30 days, except where we must retain business records to meet legal obligations.
We serve customers across India, the GCC, and the UK. Where data is transferred across borders, we use providers and safeguards designed to protect it to a comparable standard.
We use essential cookies to keep you signed in, and Google Analytics cookies on our public website. We do not use advertising cookies. See our Cookie Policy for details.
For any privacy question or request, email [email protected] and we will be glad to help.