Skip to content

Privacy policy

Short version: your contracts are yours, we do not train on them, and you can delete them permanently at any time.

Last updated 2026. This is a template you must review and adapt before operating commercially — company details, data controller identity, supervisory authority and retention periods depend on where you are established.

What we collect

  • Account data. Your email address and a hashed password. We never store your password itself.
  • Documents you upload. The extracted text of contracts you submit, so reports and chat history remain available in your dashboard.
  • Analysis output. The reports, comparisons and chat transcripts generated for you.
  • Billing references. A Stripe customer identifier and your plan status. Card details go directly to Stripe and never reach our servers.
  • Technical data. IP address for abuse prevention and free-tier rate limiting, plus standard server logs.

How your documents are used

Uploaded text is sent to Anthropic's Claude API to produce your analysis and to answer your questions about that document. It is not used to train any model — neither ours nor Anthropic's — and it is not sold, shared or used for advertising.

Analysis requires transmitting the document to that API. If your contract prohibits disclosure to third-party processors, check that before uploading.

Deletion

Deleting a contract in your dashboard removes the stored text, its analyses and its chat history from the database. To close your account entirely and delete everything associated with it, email us and we will action it.

Retention

Documents are kept while your account is open, so you can return to a report. Delete individual documents at any time. Billing records are retained for the period tax law requires.

Where your data is stored

Contracts, accounts and reports are stored in a Postgres database hosted in the European Union. Data is encrypted in transit and at rest by the database provider.

Analysis requires sending the contract text to a model provider, whose processing may take place outside the EU under standard contractual clauses. If EU-only processing is a requirement for you, tell us before uploading.

Sub-processors

  • Anthropic — model inference for analysis and chat.
  • Stripe — payment processing and subscription management.
  • Supabase (EU region) — the Postgres database holding accounts, contracts and reports.
  • Vercel — application hosting.

Your rights

Depending on where you live you may have rights to access, correct, export or erase your personal data, and to object to certain processing. Contact us and we will respond within the period the applicable law requires.

Cookies

We set two: a signed session cookie once you sign in, and an anonymous identifier so a scan you run before creating an account can be attached to it afterwards. No advertising or third-party tracking cookies.