Privacy Policy

Last Updated: October 02, 2026

1. Data Controller

The data controller for this Service is:

  • Company Name: aicontract [Legal Entity Name]
  • Registered Address: [Company Registration Address]
  • Privacy Contact Email: privacy@aicontract.tech
  • Data Protection Officer: Not applicable at this time

2. Information We Collect

2.1 Information You Provide

  • Account information: Email address, username, password (encrypted)
  • Payment information: Transaction amount, payment status. We do not store complete card numbers — card data is handled by our payment processor (see Section 5).
  • Contract content: Documents you upload for AI analysis (PDF, Word, images)
  • Communication records: Emails, support tickets, and feedback you send to our team

2.2 Information We Collect Automatically

  • Device and network: IP address, device model, operating system, browser type, timezone
  • Usage behavior: Pages visited, features used, operation logs, session duration
  • Log data: Request timestamps, error logs, performance data

3. How We Use Your Information

Purpose Legal Basis
Provide and maintain the Service Contract performance
AI contract analysis (using DeepSeek and other AI models) Contract performance
Billing and payment processing Contract performance
Customer support Contract performance / Legitimate interest
Service notifications (billing, security, policy updates) Legitimate interest
Security and fraud prevention Legitimate interest
Product optimization and analytics Legitimate interest
Legal compliance Legal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to specific individuals.

4. AI Model Disclosure

The Service uses third-party AI model providers for contract analysis and generation, including:

  • DeepSeek — primary AI model for contract analysis, risk detection, and content generation
  • Other major AI model providers — for specialized analysis tasks

Data sent to AI model providers for processing is anonymized where possible. We do not use your uploaded contract content to train AI models.

5. Cookies and Tracking Technologies

Type Purpose Can Be Disabled
Strictly necessary Session maintenance, core functionality No
Functional Language preferences, personalized settings Yes
Analytics Anonymous usage statistics, product improvement Yes

You can adjust your cookie preferences through your browser settings or our Cookie Management Center.

6. Data Sharing and Disclosure

We do not sell your personal information, including as "sale" is defined under applicable laws such as the CCPA. We only share information in the following circumstances:

  • Service providers: Cloud computing, payment processing, customer support, analytics — these providers are bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.
  • AI service providers: DeepSeek and other AI model providers process contract data for AI analysis. Data is anonymized where possible.
  • Infrastructure providers: Email delivery, cloud storage
  • Legal and regulatory requirements: As required by law, court order, or legitimate government request
  • Business transfers: In the event of a merger, acquisition, or sale of assets, with advance notice and continued protection obligations
  • With your consent: For any other purpose, only with your explicit prior consent

7. Data Security Measures

  • Transmission encryption: TLS / HTTPS
  • Storage security: Passwords and sensitive data are encrypted or hashed
  • Access controls: Principle of least privilege; employees sign confidentiality agreements
  • Regular security audits and vulnerability scanning

In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, in accordance with applicable law. Please protect your account credentials and do not share them with others.

8. Data Retention

Data Type Retention Period Disposal on Expiry
Account information During active use; 90 days after account deletion Delete or anonymize
Transaction records As required by law, typically 7 years Delete or archive
Customer support records 3 years Secure deletion
Security audit logs 12 months Secure deletion

9. Your Data Rights

To exercise the following rights, contact us at privacy@aicontract.tech. We will process your request within 30 calendar days.

Right Description
Right to be informed Understand what data we collect and how we use it
Right of access Obtain a copy of your personal data
Right to rectification Correct inaccurate or incomplete information
Right to erasure Request deletion of your data under specific conditions
Right to restrict processing Pause data processing under specific conditions
Right to data portability Receive your data in a machine-readable format
Right to object Object to processing based on legitimate interest or marketing
Right to withdraw consent Withdraw consent for processing based on consent

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

10. Cross-Border Data Transfers

Our servers and partners may be located in various regions, including [list regions such as Singapore, United States]. When data is transferred across borders, we protect it through:

  • Data processing agreements incorporating Standard Contractual Clauses (SCC) where required
  • Transfers only to recipients providing equivalent protection levels
  • Other safeguards such as adequacy decisions or Binding Corporate Rules

11. Children's Privacy

This Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors under this age. If you believe your child has provided us with personal information, please contact us immediately at privacy@aicontract.tech, and we will promptly delete the information.

12. Third-Party Links and Services

This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for the data practices of third parties, and we recommend reviewing their policies before using their services.

13. Policy Changes

If we make material changes to this Policy, we will notify you at least 15 days in advance via platform announcement or your registered email address, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated Policy.

14. Contact Us