Privacy Policy

The short version: your contracts are parsed and filled in your browser. We run no ads, no third-party trackers, and we never sell your data. Ever.

What happens in your browser

Reading a contract, computing deadlines, and filling forms all run locally on your device. Dropping a PDF on recontract.ai does not upload it anywhere — the file never leaves your browser.

What we store when you have an account

• Account basics — your email, name, and a salted hash of your password (never the password itself). If you sign in with Google, we store the account identifier Google provides.
• Contracts you generate — when you download a signature packet while signed in, the deal terms you entered are saved to your account so you can reopen, amend, and re-download that contract later. Delete any of them, any time, from your dashboard.
• Listings you publish — only what you choose to enter.
• Usage counters — packet counts and coarse region (state-level, from your connection) so the free tier works and we know where to expand. No per-page tracking, no behavioral profiles.
• API keys, if you issue any — a key is stored only as a hash, exactly like your password, plus the first few characters so you can tell your keys apart. We cannot print a key back to you after it is issued. Each call your key makes writes one meter row: which endpoint pattern, the method, the status, and whether it spent a deal — never the deal id and never anything from the contract. Meter rows are kept six months, and both the keys and the meter are deleted with your account.

Security

The contract terms you save are the only sensitive information we hold, and we encrypt them at rest (AES-256-GCM) under a key kept separate from the database. Passwords are stored only as a salted PBKDF2 hash, never in the clear. You can turn on two-factor authentication (an authenticator-app code) to protect sign-in, and we rate-limit and lock out repeated failed attempts. Everything travels over TLS, and the site is served with a strict security policy. The contract document itself is never uploaded at all — it is read and filled in your browser.

Payments

Payments are processed by Stripe. Your card number never touches our servers. We store only the Stripe customer reference and your subscription status. If you subscribe, checkout also collects your billing address so that any applicable sales tax can be calculated.

Cookies

One cookie: your sign-in session. No advertising cookies, no analytics cookies, no cross-site anything.

Who we share data with

Nobody, except the processors that make the service run: Stripe (payments), Cloudflare (hosting), and Google only if you choose Google sign-in. We never sell or rent your information.

Deleting your data

Delete contracts and listings yourself, any time, from the dashboard. You can also delete your entire account from your profile under Security — one action erases your account, saved contracts, and listings immediately. It cannot be undone. (Document integrity seals, which contain only a fingerprint and no contract terms, are kept but detached from your identity, so a document you produced can still be verified as unaltered.)

Contact

Questions about your data, or a request to exercise any of the above: support@recontract.ai.