Privacy Policy

1. Who we are

KnowMyContract is a service operated by Know My Contract ("Know My Contract", "we", "us"). Know My Contract is the data controller for the personal data described in this notice. You can reach us at kushaljain6788@gmail.com.

2. What we collect

KnowMyContract is designed to minimize data collection. When you upload a document, text is extracted in your browser using client-side PDF/OCR pipelines. Only the extracted text (with personal identifiers automatically masked) is transmitted to our AI provider for analysis. For account holders, we store the email you sign in with and, optionally, contracts you explicitly choose to save to your Vault.

3. Legal basis for processing

We process personal data on the following legal bases: (a) performance of a contract — to deliver the analysis and account features you request; (b) legitimate interests — to secure the service, prevent abuse, and improve reliability; (c) consent — where you opt in to save documents to your Vault or receive optional communications; and (d) legal obligation — to comply with applicable law and tax requirements (handled by Paddle as our merchant of record).

4. Zero document retention

Contract text sent to our AI provider is not persisted server-side unless you click "Save to Vault". A short-lived content-hash cache (30 days) lets us re-serve the same teaser to the same document without re-running the analysis; you can clear it via "Delete My Document Data".

5. PII masking

Before any text leaves your device, KnowMyContract scrubs email addresses, phone numbers, and common national identifiers (Aadhaar, PAN, SSN patterns). Masking is best-effort and not a substitute for redacting highly sensitive material before uploading.

6. Encryption

All traffic between your browser, our servers, and our AI provider uses HTTPS/TLS. Passwords for shared reports are stored as salted hashes and are never recoverable in plain text.

7. Data sharing and subprocessors

We share personal data only with the service providers required to operate KnowMyContract: our hosting and database provider (Supabase), our AI model provider (via the Lovable AI Gateway) for analysis of masked contract text, and Paddle.com as our merchant of record for payments, subscription management, tax compliance, and invoicing. We may also disclose data to authorities where required by law.

8. Retention

Vault contracts and account data are kept until you delete them or close your account. The content-hash teaser cache expires after 30 days. Payment records held by Paddle are retained per Paddle's policies and applicable tax law.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability and to withdraw consent. You can delete any saved contract from your Vault at any time — deletion is immediate and permanent. To exercise any right or request account removal, contact us at kushaljain6788@gmail.com. EU/UK residents have the right to complain to their local supervisory authority.

10. Changes

We'll post material changes to this policy on this page. Continued use of KnowMyContract after a change indicates acceptance of the revised policy.