Privacy Policy

1. Information We Collect

We collect information you provide directly: name, email address, and organization details when you create an account. We also collect contract files (PDFs) you upload for processing.

2. How We Use Your Information

We use your information to: provide the contract tracking service, extract key dates from uploaded contracts using AI, send alert notifications, and improve our service. We do not sell your data to third parties.

3. Data Storage & Security

Contract files are stored encrypted in Cloudflare R2 (EU region). Account data is stored in PostgreSQL (Neon, EU). Authentication is handled by Clerk. All data is transmitted over HTTPS. We maintain an immutable audit log of all actions.

4. Third-Party Services

We use the following processors:

• Clerk — authentication and user management
• Neon — database hosting (PostgreSQL, EU)
• Cloudflare R2 — file storage (encrypted at rest)
• OpenAI — contract data extraction (GPT-4o)
• Resend — email delivery
• Paddle — payment processing (Merchant of Record)

5. Your Rights (GDPR)

You have the right to: access your data, correct inaccurate data, delete your account and data, export your data (CSV), and object to processing. Contact us to exercise these rights.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data (contracts, alerts, audit logs) is permanently deleted within 30 days.

7. Contact

For privacy inquiries, contact us at: privacy@contractguard.app