Privacy Policy

Account information. Your name, email address, password (stored only as a secure hash), plan selection, and the date you accepted these policies.

Contract files and content. The documents you upload and the agreement details you enter or confirm — titles, counterparties, clients or matters, dates, payment schedules, notices, and notes.

Payment information. Subscription payments are processed by Stripe. We receive a customer and subscription identifier, plan, and status. We never see or store your full card number.

Usage data. Basic technical and diagnostic information such as sign-in events, feature usage, and error logs, used to operate and improve the Service.

We use your information to provide and operate the Service; to run AI-assisted extraction on documents you choose to upload; to calculate plan limits and process billing; to send account, renewal, and deadline-related notifications; to provide customer support; and to secure, debug, and improve the platform. We do not sell your personal information, and we do not use your contract content for advertising.

Your data is stored in a managed Postgres database with row-level security policies that restrict every record to its owner (and, where applicable, to seats you have authorized within your organization). Uploaded files are held in a private storage bucket that is not publicly readable. Data is encrypted in transit and at rest, and administrative access is limited and role-based.

No system is completely secure. We cannot guarantee absolute security, and you share information with the Service at your own discretion.

We share data only with service providers acting as processors on our behalf, and only as needed to run the Service:

Stripe — payment and subscription processing. Supabase — cloud hosting, database, authentication, and file storage. Our AI provider — processes the contents of documents you submit to the auto-fill feature in order to return extracted fields.

We do not sell or rent your personal information, and we do not share it with third parties for their own marketing. We may disclose information if required by law, subpoena, or valid legal process, or to protect the rights and safety of users and the public.

We retain your account data and uploaded files for as long as your account is active. You may delete individual agreements, files, clients, or notices at any time from within the app. When you close your account, we delete or anonymize your personal data and uploaded content within a reasonable period, except where we must retain limited records (for example billing history) to comply with legal, tax, or accounting obligations.

Subject to applicable law, you have the right to access the personal data we hold about you, to correct inaccurate data, to export a copy of your data, to request deletion of your data, and to object to or restrict certain processing. Most of this is available directly in the app; for anything else, contact us at the address below and we will respond within the timeframe required by law.

We use only the cookies and local browser storage necessary to keep you signed in and to remember basic preferences. We do not use third-party advertising cookies or cross-site tracking. If we introduce product analytics in the future, we will update this policy and, where required, ask for your consent first.

The Service is not directed at children. We do not knowingly collect personal information from anyone under 13 (or under 16 where a higher age applies by law). If you believe a child has provided us information, contact us and we will delete it. Where a minor's agreement is being tracked, the account must be held and managed by a parent, guardian, or authorized representative.

In the event of a security incident affecting your personal data, we will notify affected users without undue delay and in accordance with applicable law, including a description of what happened and the steps we are taking. Any such notice is provided for compliance purposes and is not an admission of fault or liability beyond what applicable law requires.

We may update this policy; material changes will be announced through the Service or by email. Questions, requests, and privacy complaints may be sent to legal@autonomas.example.com (placeholder — replace with your official privacy contact address). See also our Terms of Service.