Privacy Policy

1. Data Controller

2. Hosting Provider

Vercel Inc.
340 S Lemon Ave #4133, Walnut, CA 91789, USA
vercel.com

3. Data Collected

When using ContractCheck, we collect the following data:

• Account data: Email address (for authentication and Pro accounts)
• Usage data: IP address, browser type, pages visited
• Uploaded documents: Contracts and analyzed files (PDF, DOCX)
• Analysis results: Risk scores, generated reports, AI conversations
• Payment data: Processed by Stripe — we do not store credit card numbers

4. Purpose of Processing

Your data is used to:

• Provide the contract analysis service via Claude AI (Anthropic)
• Manage your account, authentication and subscription
• Save your analyses and conversations
• Send transactional emails (login codes, subscription confirmation)
• Improve the quality and relevance of our analyses
• Comply with legal and tax obligations

5. Legal Basis for Processing

• Contract execution: Provision of the analysis service
• Consent: Analytics cookies, marketing communications
• Legal obligation: Retention of billing data
• Legitimate interest: Service improvement, security

6. Data Retention

7. Data Sharing — Sub-processors

Your data is only shared with the following technical providers required for the service:

We never sell your data to third parties.

8. International Transfers

Some data is processed in the United States (Anthropic, Vercel, Stripe) under the EU-US Data Privacy Framework. These transfers are governed by standard contractual clauses approved by the European Commission.

9. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Obtain a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Delete your data ("right to be forgotten")
• Right to portability: Retrieve your data in a structured format
• Right to object: Object to the processing of your data
• Right to restriction: Restrict the processing of your data

To exercise these rights, contact us at: privacy@getcontractcheck.com
Response time: 30 days maximum.

10. Security

We implement the following security measures:

• SSL/TLS encryption for all communications
• Email verification code authentication (secure JWT)
• Secure payments via Stripe (PCI-DSS compliant)
• Documents processed in memory, not stored on disk
• Restricted data access (principle of least privilege)
• Encrypted database (Neon PostgreSQL)

11. Cookies

We use the following cookies:

• Essential cookies: User session, rate limiting (required for operation)
• Payment cookies (Stripe): Security and fraud prevention

For more details, see our Cookie Policy.

12. Complaints

In case of a dispute regarding the processing of your data, you can file a complaint with the CNIL (French Data Protection Authority):

You may also use the European Commission's online dispute resolution platform: ec.europa.eu/consumers/odr

13. Changes

This policy may be modified at any time. The last update date is shown at the top of the page. Significant changes will be notified by email with 30 days' notice.

14. Contact

For any questions regarding this policy or your personal data:

• 📧 General email: contact@getcontractcheck.com
• 🔒 Privacy questions: privacy@getcontractcheck.com