Privacy Policy

Last updated: January 1, 2025

Data We Collect

  • Email address (required for account)
  • Contract documents you upload (stored encrypted, deleted after 90 days)
  • Usage data (documents analyzed, plan tier)
  • Payment information (processed by Stripe, we never see card numbers)

How We Use Your Data

  • To provide contract analysis via Claude (Anthropic) and GPT (OpenAI), used together to independently cross-verify each analysis
  • To send analysis reports and reminders via email
  • To process payments via Stripe
  • To improve our service (aggregate, anonymized analytics only)

Your Contract Data

Your contract documents are sent to Anthropic's Claude API and OpenAI's API for analysis and independent validation. Both providers process your data solely to return the analysis and, under their API terms, do not use it to train their models. We never use your contracts to train any AI model, and we never sell or share your contract content with any other third parties. Documents are automatically deleted from our servers after 90 days.

Data Security

All data is stored on AWS infrastructure in the United States. Documents are encrypted at rest (AES-256) and in transit (TLS 1.2+). Access to your data is restricted to you and our systems. We undergo regular security reviews.

Your Rights

  • Access: Request a copy of your data at any time
  • Deletion: Request deletion of your account and all data
  • Correction: Update inaccurate information in your account
  • Portability: Export your analysis history

To exercise these rights, contact support@contractverifai.com

Cookies

We use essential cookies for authentication (managed by AWS Cognito) — these are required for the service to work and aren't optional. With your consent (via the cookie banner shown on your first visit), we also use Google Analytics to understand aggregate traffic patterns like page views and referral sources; IP addresses are anonymized and we do not use advertising or cross-site tracking cookies. You can decline analytics cookies at any time, and doing so does not affect your ability to use the service.

GDPR / CCPA

For EU users: We process data under the legal basis of contractual necessity and legitimate interests. For California residents: You have the right to know, delete, and opt out. We do not sell personal information.