What happens to your contract
- The instant scan (clause checks + state notes): runs entirely in your web browser. Your contract text is not sent to us for this part.
- The AI deep review: when you run it, your contract text is sent securely to our AI provider (Anthropic) to generate the memo, then returned to you. We do not store your contract text, and it is not used to train anything.
- Your review record (all plans): we save a one-way fingerprint (a hash) of each contract you review, together with the date. A fingerprint can't be turned back into your contract. This is how we count reviews against your monthly limit, and how we know not to charge you twice for re-opening the same contract.
- Saved history (Pro and Max only): so you can re-open a past review, we also save the results of the scan: the name you gave the contract, the project state, which clauses were flagged, their severity, the plain-English explanation, what we suggested you do — and a short quoted extract (roughly a sentence) of each flagged clause, so you can see what triggered it in context.
- We do not store the full contract — only these extracts of the clauses that were flagged.
- You can rename or permanently delete any saved review from your account page, at any time.
- Deleting your account permanently deletes every saved review with it.
- On the Base plan we keep no saved findings — just the fingerprint and the date.
What we collect and store
- Your account: your email address and a password. Your password is handled and stored securely by our authentication provider (Supabase) — we never see it.
- Your subscription: which plan you're on, its status and renewal date, and a customer reference from Stripe. This is how the app knows what you've paid for.
- Your review history: the contract fingerprints and dates described above.
- Payment information: handled entirely by Stripe. We never receive or store your card number — Stripe does.
- Basic technical data: like any website, our host (Vercel) processes standard request information (such as IP address) to serve the site and protect it from abuse.
- No advertising trackers, and we don't sell your data.
Who processes your data
A few providers help run the service. Each handles only what it needs to:
- Supabase — accounts, login and our database (your email, plan and review history).
- Stripe — payments and subscriptions. Stripe holds your card details; we don't.
- Anthropic — the AI that writes the deep-review memo. Receives your contract text only to produce that review.
- Vercel — hosting. Processes standard technical request data to run the site.
We encourage you to review each provider's own privacy terms.
Your choices and your rights
- See or correct your data: your email and plan are shown on your account page. Email us to ask what we hold or to correct it.
- Delete your account: email us at the address below and we'll delete your account and associated data. Note that Stripe may retain payment records where the law requires (for example, for tax and accounting).
- Keep a contract fully local: use the instant scan and skip the AI deep review — the scan never leaves your browser. And, as always, don't paste anything you're not comfortable submitting.
How long we keep it
We keep your account, subscription and review-history data for as long as your account is active. If you delete your account, we remove that data, except where a provider (such as Stripe) or the law requires a record to be kept for a limited period.
Cookies & analytics
We use privacy-friendly, cookieless analytics (Vercel Web Analytics) to understand how the site is used. It doesn't track you across other sites or build advertising profiles. We use only the cookies strictly needed to run the Service — for example, to keep you signed in. We don't use advertising or third-party tracking cookies.
How we protect your data
We use reputable providers and industry-standard measures, including encryption in transit, to protect your data. No method of transmission or storage is completely secure, so we can't guarantee absolute security.
When we may disclose information
We may disclose information if required by law or legal process, or where we believe in good faith it's needed to protect our rights, prevent fraud or abuse, or protect the safety of any person.
Where your data is processed
The Service is operated in, and intended for, the United States. Your data is processed and stored in the US by us and our providers. If you use the Service from outside the US, you consent to your data being processed here.
California residents
If you live in California, you have the right to know what personal information we collect, to access, correct or delete it, and not to be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law, and we have not done so. To exercise a right, email bryce@contractsinsider.com.
Children
The Service is for adults (18+) and isn't directed to children. We don't knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we'll delete it.
Changes to this policy
We may update this notice from time to time. If we make a material change, we'll update the date at the top and, where appropriate, let you know. Continuing to use the Service after an update means you accept the revised notice.
Contact
Questions about privacy, or want your data deleted? Email bryce@contractsinsider.com.