1. Introduction

This Privacy Policy explains what Contract Analyzer collects, what contract data is sent to the configured external AI provider, what is stored in your account, and how you can delete a contract record and its analysis.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when using our Service:

Name and email address when creating an account
Purchase status and transaction identifiers received from Paddle; raw card details are handled by Paddle rather than stored by Contract Analyzer
Communications when you contact our support team

Document Data

When you upload contracts for analysis:

Uploaded PDF and DOCX files are processed to extract contract text
With the current LocalFileStorage implementation, uploaded file bytes are not written to permanent file storage
Up to 12,000 characters of extracted text are sent to the configured external AI provider for analysis
The same extracted text and the resulting analysis are stored in the application database under your account

Automatically Collected Information

Browser and user-agent information associated with service requests
IP address information used for security and audit events
Technical logs needed to operate and troubleshoot the service

3. How We Use Your Information

We use the collected information for:

Providing and maintaining the Service
Extracting contract text and sending it to the configured AI provider to generate an analysis
Storing your extracted text and analysis so you can review them in your account
Processing transactions and managing your account
Sending important updates and notifications
Improving our Service and developing new features
Ensuring security and preventing fraud
Complying with legal obligations

4. External AI Processing and Service Providers

Contract Analyzer uses service providers to operate the product. In particular, the configured external AI provider receives up to 12,000 characters of extracted contract text and returns the generated analysis. Provider-side use, retention, and deletion are governed by that provider's terms and the service configuration; we do not promise provider-side zero retention.

AI provider: processes extracted contract text to generate the requested analysis
Payment provider: processes purchases and supplies transaction status and identifiers
Email provider: delivers account and service messages
Legal requirements: information may be disclosed when required by law or to protect legal rights

5. Data Security

Contract records are tied to the authenticated account that created them, and application access controls are used to restrict one account from retrieving another account's records. No online service or AI output can be guaranteed completely secure or error-free, and this policy does not make a blanket security guarantee.

Review our Security and Data Handling page for the current storage flow, deletion controls, limitations, and independent guidance.

6. Contract Data Retention and Deletion

The current local storage implementation does not permanently write uploaded file bytes. Up to 12,000 characters of extracted contract text and the resulting analysis remain in the application database until you delete that contract record.

You can delete an individual contract from My Contracts. That action removes the stored contract record, extracted text, and its related analyses from the application database. It does not control any provider-side retention that may already have occurred under the external AI provider's terms.

7. Your Choices and Rights

You can delete individual contract records through My Contracts. Depending on your location, privacy law may also give you rights to:

Access and receive a copy of your personal data
Rectify inaccurate personal data
Request deletion of personal data not covered by the in-product contract deletion control
Object to or restrict processing of your data
Data portability
Withdraw consent at any time

8. Cookies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.

9. Children's Privacy

Our Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have questions or want to make a privacy request, please contact us at support@contractscan.net