Privacy Policy

1. Introduction

This Privacy Policy explains how Contract Scanner ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our website and contract-analysis service (the "Service"). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

2. Information We Collect

Account information: your first and last name, email address, phone number (optional), and a securely hashed password. We never store your password in plain text.

Content you submit: the contract text, documents, or images you upload or paste for analysis, and the structured analysis results we generate. We store the structured results associated with your account so you can revisit them; we do not retain the original uploaded files after processing.

Payment information: when you purchase credits or a plan, payments are processed by our payment provider (Stripe). We do not receive or store your full card number. We retain a record of your transactions (amount, plan, status, and a processor reference).

Usage and device data: basic technical information such as IP address, browser type, and interactions with the Service, used for security, rate limiting, and to improve the product.

Local storage: we use your browser’s local storage to keep you signed in and to remember drafts and recent reports on your device.

3. How We Use Your Information

To provide, operate, and maintain the Service, including generating contract analyses.

To create and manage your account, process payments, and deliver purchased credits or plans.

To secure the Service, prevent abuse, and enforce usage limits.

To communicate with you about your account, transactions, and material changes to the Service.

To comply with legal obligations and enforce our Terms of Service.

4. AI Processing and Third-Party Service Providers

Contract analysis is performed with the assistance of a third-party AI provider (OpenAI). The contract text you submit is transmitted to that provider solely to generate your analysis. We do not sell your content, and we do not use it to train our own models.

We also rely on service providers for payment processing (Stripe), application hosting, and database storage. These providers process data on our behalf under their own terms and privacy commitments.

We do not sell your personal information to third parties.

5. Data Retention and Deletion

We retain your account information and saved analyses for as long as your account is active. You may delete individual data or your entire account at any time from your account settings. Deleting your account permanently removes your profile, saved reports, and payment records associated with it, subject to any records we must retain to comply with legal, tax, or accounting obligations.

6. Security

We use industry-standard measures to protect your information, including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA) have specific rights, including the right not to receive discriminatory treatment for exercising them.

To exercise any of these rights, contact us at italiyajemish1999@gmail.com. We will respond within the timeframe required by applicable law.

8. Cookies and Local Storage

We use essential local storage and cookies to operate the Service (for example, to keep you signed in). We do not use them for third-party advertising. You can clear this data through your browser, though doing so may affect functionality.

9. Children’s Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. International Data Transfers

Your information may be processed and stored in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at italiyajemish1999@gmail.com.