Privacy Policy

ContractKit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered contract review platform, including our website, applications, and related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2.1 Information You Provide

• Account information: name, email address, company name, and password when you create an account.
• Contract documents: files you upload for AI-powered analysis, including PDFs, Word documents, and text content.
• Payment information: billing details processed securely through our payment provider (Stripe). We do not store full credit card numbers on our servers.
• Communications: messages you send to us through support channels or feedback forms.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, analysis history, and interaction patterns.
• Device information: browser type, operating system, device identifiers, and IP address.
• Cookies and similar technologies: session cookies for authentication and analytics cookies to improve the Service.

We use the information we collect to:

• Provide, maintain, and improve the Service, including AI-powered contract analysis.
• Process your transactions and manage your subscription.
• Send you service-related communications, including deadline reminders and compliance alerts.
• Respond to your inquiries and provide customer support.
• Monitor and analyze usage trends to improve user experience.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations and enforce our terms of service.

When you upload a contract for analysis, the document content is processed by our AI systems to identify risks, obligations, key dates, and other relevant provisions. Important details about this processing:

• Your contract data is processed solely to provide the analysis you requested.
• We do not use your contract content to train our AI models.
• Contract data is encrypted in transit and at rest.
• You may delete your uploaded contracts and analysis history at any time through your account settings.

We do not sell your personal information. We may share information in the following circumstances:

• Service providers: trusted third parties that help us operate the Service (e.g., cloud hosting, payment processing, email delivery).
• AI processing partners: language model providers that process contract text for analysis, subject to strict data processing agreements.
• Legal requirements: when required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate notice to users.
• With your consent: when you explicitly authorize sharing for a specific purpose.

We implement industry-standard security measures to protect your information, including:

• TLS/SSL encryption for all data in transit.
• Encryption at rest for stored contract documents and personal data.
• Regular security assessments and vulnerability testing.
• Access controls limiting employee access to user data on a need-to-know basis.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information and contract data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time through your account settings. Upon account deletion, we will remove your personal data and contract documents within 30 days, except where retention is required by law.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Delete your personal information and contract data.
• Export your data in a portable format.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at [email protected].

We use essential cookies to maintain your authentication session and preferences. We may also use analytics cookies to understand how the Service is used. You can control cookie settings through your browser preferences, though disabling essential cookies may affect Service functionality.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us at: