Privacy Policy

• Account information — your name, email, plan tier, and (if you sign up with email/password) a bcrypt-hashed password. If you sign in with Google, we receive your name, email, and profile picture via OAuth.
• Contract content — the text you paste or the PDF you upload for AI risk extraction and safer redline analysis. This is stored in redacted form (see § 2).
• Risk clause metadata — extracted risk flag names, clause categories, amounts, status labels, and safer redline alternatives you manage or share.
• Usage signals — anonymous share-link view counts (an SHA-256 fingerprint of IP + user agent, truncated to 32 chars — not reversible) for our Pro “Deal Room analytics” feature.
• Payment records — Stripe session IDs, amounts, statuses. We do not store card numbers; those live only with Stripe.

Before any contract text is written to our database or sent to external AI providers, our backend runs a server-side regex masking pipeline that replaces common sensitive patterns with the literal token [REDACTED]:

• Email addresses (standard local@domain.tld forms)
• Phone numbers — international (+852 9123 4567), US ((555) 123-4567), and dashed local formats
• Payment card numbers (13–19 digits with any separator)
• US Social Security numbers
• Passport-style identifiers (letter prefix + 6–9 digits)
• IBAN codes
• US bank routing numbers (ABA / “routing:” prefixes)
• National ID card numbers (“ID#” prefixes with 8–14 digits)

Only the redacted form is stored. Only the redacted contract text and clause contents ever leave our masking layer to reach the AI risk extraction pipeline (Claude Sonnet model) or MongoDB. Zero of your contract data is used for training public models.

• Deliver the Service — scan contracts, flag high-risk clause traps, generate safer redlines, render Deal Rooms, and dispatch alerts.
• Send transactional email (account verification, password resets, and optional weekly portfolio digests) via Resend.
• Bill your subscription via Stripe.
• Protect the Service — rate-limit login attempts, log security-relevant events.

We do not sell your data. We share only with:

• AI Core Infrastructure — secure, enterprise-grade LLM processing via encrypted gateway API (Claude Sonnet model).
• Stripe — for payments and billing portal.
• Resend — for transactional email delivery.
• Law enforcement — only when compelled by valid legal process.

Redacted contract text and risk flags are retained for the life of your account. On account deletion, we delete your records within 30 days, except where retention is legally required (e.g. Stripe invoice history).

You can access, export, or delete your data at any time by emailing us at support@vowpace.com. If you are in the EEA or UK, you may have additional GDPR rights (rectification, objection, portability); we honor these on written request.

We use HTTPS across all endpoints, HttpOnly + Secure cookies for session tokens, bcrypt for password hashing, brute-force rate limiting on login and password reset endpoints (5 fails / 15 min per IP), and single-use time-limited reset tokens (1 hour).

Privacy questions? Reach us at support@vowpace.com.