Privacy Policy

1. Overview

ContractCheck (“we”, “us”) provides an AI-powered contract review tool. This Privacy Policy explains what information we collect, how we use it, and the choices you have. ContractCheck is an informational tool and is not a law firm; see our Terms of Service for details.

2. Information We Collect

• Account information: email address, authentication identifiers, and profile details you provide.
• Uploaded documents: contracts and text you submit for scanning, and the AI-generated analysis derived from them.
• Billing information: plan, subscription status, scan credits, and Stripe customer/subscription identifiers. Card numbers are handled directly by Stripe; we never see or store them.
• Usage data: log data, device/browser metadata, IP address, and feature interactions used to operate and secure the Service.
• Cookies: strictly necessary cookies for sign-in and session management.

3. How We Use Information

• Provide, operate, and improve the Service.
• Run contract scans and return results to you.
• Process payments and manage subscriptions through Stripe.
• Communicate with you about your account, billing, and support requests.
• Detect abuse and enforce our Terms.
• Comply with legal obligations.

4. AI Processing of Uploaded Contracts

Documents you upload are transmitted to third-party AI model providers solely to generate your scan output. We contractually require these providers not to train their models on your content. Scan results and (where you choose) the underlying text are stored in your account so you can revisit them. You can delete scans at any time from your dashboard.

5. Sharing

We share information only with service providers that help us run ContractCheck:

• Stripe — payment processing and subscription billing.
• AI providers (e.g. OpenAI, Google) — running contract analysis.
• Cloud infrastructure and authentication providers — hosting, database, and sign-in.

We do not sell your personal information. We may disclose information if required by law or to protect rights, safety, or property.

6. Data Retention

We retain account and scan data while your account is active. You can delete individual scans at any time. When you delete your account, we delete or anonymize your data within 30 days, except where retention is required for legal, tax, or fraud-prevention purposes.

7. Security

We use encryption in transit, encryption at rest, access controls, and row-level security in our database. No system is perfectly secure; you use the Service at your own risk and should avoid uploading documents containing information you are not authorized to share.

8. Your Rights

Depending on your location (including the EEA, UK, and California), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@getcontractcheck.org.

9. International Transfers

We and our service providers may process your data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Children

The Service is not directed to children under 18 and we do not knowingly collect their personal information.

11. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, notify you via the Service or email.

12. Contact

Privacy questions? Email privacy@getcontractcheck.org.