Privacy Policy — ContractReview

1. Introduction

ContractReview (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered contract review service.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and a hashed password. We do not have access to your plain-text password.

Contract Content: The contracts you upload for analysis. This includes the full text of PDF, DOCX, and other document formats you submit.

Usage Data: We collect technical information including IP addresses, browser type, pages visited, and timestamps for security and service improvement.

AI Processing: Contract text is transmitted to third-party AI providers (DeepSeek, Anthropic) solely for the purpose of generating analysis.

3. How We Use Your Information

To provide the contract analysis service you requested
To maintain and improve the Service
To communicate with you about your account and the Service
To enforce our Terms of Service and prevent abuse
To comply with legal obligations

4. AI Data Processing

ContractReview uses third-party AI providers (DeepSeek and Anthropic) to analyze contracts. When you upload a contract, the text is sent to these providers' APIs for processing.We do not use your contract data to train or fine-tune AI models.AI providers may process data in accordance with their own privacy policies.

5. Data Storage & Security

Your account information and contract data are stored on secure cloud infrastructure (Neon PostgreSQL). We implement industry-standard security measures including:

Encryption of data in transit (TLS/SSL) and at rest
Password hashing using bcrypt
JWT-based authentication with httpOnly cookies
Rate limiting to prevent abuse

6. Data Retention

Contract data is retained for as long as your account is active. You may request deletion of your data at any time. Upon account deletion, your contracts, analysis results, and personal information will be permanently removed from our systems within 30 days.

7. Cookies

We use a single essential cookie to maintain your authenticated session (JWT token stored in an httpOnly cookie). This cookie is required for the Service to function. We do not use tracking cookies or third-party analytics cookies.

8. Third-Party Services

Our Service relies on the following third-party providers:

DeepSeek — AI language model for contract analysis
Anthropic — Fallback AI provider for contract analysis
Neon — Cloud PostgreSQL database hosting

Each provider has its own privacy policy governing their handling of data.

9. Your Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@contractrev.com.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect information from children.

11. International Data Transfers

Your data may be processed in countries outside your own, including the United States and China (where our AI providers operate). We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Material changes will be notified via email.

13. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@contractrev.com.