Privacy Policy

Draft — pending legal review. This page describes our current data handling practices and is not yet a final, binding policy.

1. What we collect

Account information (name, email, organization) you provide at signup, and the contract documents and metadata you upload to the Service.

2. How we use it

Uploaded contract content is sent to Anthropic's API to extract clauses and terms. Extracted data is stored to power your Portfolio, review queue, renewal notifications, and audit trail. We do not sell customer data or use it to train third-party models beyond what each sub-processor's own terms permit. See our sub-processors list for every vendor that processes customer data and why.

3. Storage and retention

Uploaded files are stored encrypted via our storage provider. Data is retained for as long as your account is active, or as needed to comply with legal obligations. Deleting a contract removes it and its extracted history from active storage.

4. Sub-processors

We use a small number of third-party service providers to operate the Service, including our AI extraction vendor, cloud storage, email delivery, and hosting infrastructure. The current list is published at /subprocessors.

5. Your rights

You can request access to, correction of, or deletion of your account and contract data by contacting your account contact. Depending on your jurisdiction, you may have additional rights under applicable data protection law.

6. Data processing agreement

Customers requiring a Data Processing Agreement (DPA) for compliance purposes — for example under GDPR — can request one from their account contact.

7. Contact

Questions about this policy can be sent to your account contact.