Privacy Policy

1. Introduction

Before You Sign ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. BY USING OUR SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE, DO NOT USE OUR SERVICE.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication data (via Clerk)
• Contract Documents: PDF, image, or document files you upload for analysis (including but not limited to leases, employment contracts, NDAs, non-competes, and any other documents)
• Location Information: City and state information you provide
• Payment Information: Processed by Stripe (we do not store credit card details)

2.2 Automatically Collected Information

• Log data (IP address, browser type, pages visited)
• Device information
• Usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide AI-powered contract analysis
• Process your uploaded contract documents
• Generate analysis reports
• Process payments
• Send service-related communications
• Improve our Service and AI models
• Detect and prevent fraud
• Comply with legal obligations

4. AI Processing and Third-Party Services

CRITICAL NOTICE: Your contract documents are processed using third-party AI services, including but not limited to:

• Anthropic (Claude AI)
• OpenAI (GPT models)
• Google Cloud Vision (OCR)
• Other AI and cloud services as we may add or change at any time

BY USING OUR SERVICE, YOU EXPRESSLY ACKNOWLEDGE, UNDERSTAND, AND CONSENT TO:

• Your contract documents being transmitted to and processed by these third-party AI services
• These third parties having access to the full contents of your documents
• The possibility that these services may retain, store, or use your data according to their own policies
• The inherent risks of transmitting sensitive information over the internet
• WE HAVE NO CONTROL OVER AND ACCEPT NO RESPONSIBILITY FOR THE ACTIONS, POLICIES, OR PRACTICES OF THESE THIRD-PARTY AI PROVIDERS

Data Retention by AI Providers: Third-party AI services may retain your data according to their own privacy policies, which may change at any time without notice to us or you. We strongly recommend reviewing the privacy policies of Anthropic, OpenAI, and Google before using our Service. YOUR USE OF OUR SERVICE CONSTITUTES YOUR ACCEPTANCE OF THESE THIRD-PARTY POLICIES.

5. Data Storage and Security

We use Supabase and other cloud services to store your data. YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT:

• NO METHOD OF INTERNET TRANSMISSION OR ELECTRONIC STORAGE IS 100% SECURE
• WE CANNOT AND DO NOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR DATA
• Unauthorized access, hacking, data loss, hardware failure, or other factors may compromise your data at any time
• YOU UPLOAD AND TRANSMIT ALL DOCUMENTS ENTIRELY AT YOUR OWN RISK
• WE ARE NOT LIABLE FOR ANY UNAUTHORIZED ACCESS, DATA BREACHES, DATA LOSS, OR ANY OTHER SECURITY INCIDENTS
• WE ARE NOT LIABLE FOR ANY DAMAGES, LOSSES, OR CONSEQUENCES RESULTING FROM ANY SECURITY INCIDENT
• You assume full responsibility for any consequences of uploading sensitive documents

6. Data Retention

We retain your contract documents and analysis results for as long as your account is active or as needed to provide services. You may request deletion of your data at any time, but we may retain certain information as required by law or for legitimate business purposes. WE CANNOT GUARANTEE DELETION FROM THIRD-PARTY AI PROVIDERS OR BACKUP SYSTEMS.

7. Sharing Your Information

We may share your information with:

• AI Service Providers: To process your contract documents (Anthropic, OpenAI, Google, and others)
• Authentication Provider: Clerk for account management
• Payment Processor: Stripe for payment processing
• Hosting Providers: Vercel, Supabase for infrastructure
• Analytics Providers: To understand usage patterns
• Legal Authorities: When required by law or to protect our rights
• Any other parties: As we deem necessary in our sole discretion

We do NOT sell your personal information to third parties for marketing purposes.

8. AI Training and Model Improvement

BY USING OUR SERVICE, YOU GRANT US A PERPETUAL, IRREVOCABLE, ROYALTY-FREE, WORLDWIDE LICENSE TO USE ANONYMIZED AND AGGREGATED DATA FROM YOUR CONTRACT ANALYSES TO:

• Train and fine-tune our AI systems
• Improve analysis accuracy
• Develop new features and services
• Create derivative works and analyses
• Any other purpose we deem appropriate

We take steps to anonymize and aggregate this data to protect your privacy, but YOU ACKNOWLEDGE THAT COMPLETE ANONYMIZATION MAY NOT BE POSSIBLE AND WE ARE NOT LIABLE FOR ANY FAILURE TO FULLY ANONYMIZE DATA.

9. Sensitive Information in Contracts

⚠️ CRITICAL WARNING: Contract documents often contain highly sensitive personal information including but not limited to:

• Full legal names and signatures
• Social Security numbers
• Bank account and financial information
• Home and work addresses
• Phone numbers and email addresses
• Salary, compensation, and financial details
• Medical information (in some contracts)
• Trade secrets and confidential business information

BY UPLOADING ANY DOCUMENT, YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT:

• All information in your documents will be processed by our Service and third-party AI providers
• This information may be stored, retained, or used by third parties
• YOU ARE SOLELY RESPONSIBLE FOR REDACTING ANY INFORMATION YOU DO NOT WANT PROCESSED
• WE ARE NOT LIABLE FOR ANY EXPOSURE, BREACH, OR MISUSE OF SENSITIVE INFORMATION
• You have the legal right to upload and share all documents you submit
• You will not hold us liable for any consequences of uploading sensitive information

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to processing of your information
• Request data portability
• Withdraw consent (where applicable)

To exercise these rights, contact us at privacy@beforeyousign.app. WE CANNOT GUARANTEE THAT WE CAN FULFILL ALL REQUESTS, PARTICULARLY REGARDING DATA HELD BY THIRD-PARTY PROVIDERS.

11. Cookies and Tracking

We use cookies and similar tracking technologies for authentication, analytics, and service functionality. You can control cookies through your browser settings, but disabling cookies may limit functionality. BY USING OUR SERVICE, YOU CONSENT TO OUR USE OF COOKIES.

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including countries that may have different or less protective data protection laws than your country. BY USING OUR SERVICE, YOU EXPRESSLY CONSENT TO SUCH TRANSFERS AND WAIVE ANY CLAIMS RELATED TO INTERNATIONAL DATA TRANSFERS.

14. California Privacy Rights (CCPA)

California residents have specific rights under the CCPA, including the right to know what personal information we collect and the right to request deletion. Contact us to exercise these rights.

15. GDPR (European Users)

If you are in the European Economic Area, you have rights under GDPR including access, rectification, erasure, and data portability. Our legal basis for processing is your consent and contractual necessity.

16. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you as required by applicable law. HOWEVER, WE ARE NOT LIABLE FOR ANY DAMAGES, LOSSES, OR CONSEQUENCES RESULTING FROM ANY DATA BREACH, REGARDLESS OF CAUSE.

17. Limitation of Liability for Privacy Matters

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BEFORE YOU SIGN SHALL NOT BE LIABLE FOR ANY DAMAGES, LOSSES, OR CONSEQUENCES ARISING FROM:

• Any data breach, unauthorized access, or security incident
• Any actions or policies of third-party service providers
• Any exposure of sensitive information in uploaded documents
• Any failure to fully anonymize or protect data
• Any use of your data by third-party AI providers
• Any loss, corruption, or destruction of data
• Any matter related to the privacy or security of your information

YOUR SOLE REMEDY FOR ANY PRIVACY-RELATED CONCERNS IS TO STOP USING OUR SERVICE.

18. Changes to Privacy Policy

We may update this Privacy Policy at any time without notice. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Service after changes constitutes acceptance. IT IS YOUR RESPONSIBILITY TO CHECK THIS POLICY REGULARLY.

19. Contact Us

For privacy-related questions or requests:
Email: privacy@beforeyousign.app