ContractScanner.app ("ContractScanner", "we", "us") is built so that we know as little about you as possible. This policy explains, in plain language, what happens to your documents, what we store, and what we never touch. If anything here is unclear, email privacy@contractscanner.app.
The short version
- Your uploaded file never leaves your device.
- Only the text you choose to analyze is sent to us, encrypted, and only for the seconds it takes to produce your report.
- We do not store, log, or back up contract text or reports. Ever.
- We keep only what is needed to run your account: your email, your credit balance, and purchase records.
- No advertising, no tracking pixels, no analytics cookies.
What happens to your document
Step 1: Extraction happens in your browser. When you upload a PDF, Word file, or image, the text is pulled out of it on your own device. The file itself is never uploaded to our servers. If you paste text instead, that text stays in your browser until you choose to run a scan.
Step 2: Automatic redaction, also in your browser. Before anything is sent, we replace email addresses, phone numbers, and long number sequences (such as account, card, or ID numbers) with placeholders like [EMAIL] and [NUMBER]. You can review what was redacted before you continue. Please note that names and addresses are not redacted automatically; if you want them hidden, edit the text before scanning.
Step 3: The text is analyzed, then discarded. When you run a scan, the redacted text travels over an encrypted connection (TLS) to our server, which runs on Cloudflare. That server forwards it to Google's Gemini API to produce the report, returns the report to your browser, and holds nothing. We do not write contract text or reports to any database, log file, or backup.
Step 4: The report lives only in your browser. Your report is shown in your browser. Your last five full reports are also kept in your own browser's storage on your device for 7 days, so that closing the tab by accident does not lose it; you can delete it from the scan page at any time. It never reaches our servers, and we cannot retrieve it for you, because we never had a copy. Free previews are not kept.
About Google's Gemini API
We use Google's Gemini API on its paid tier. Google states that inputs sent through the paid API are not used to train its models. Google may keep data for a short period for abuse monitoring, as described in the Gemini API Terms. We cannot control Google's systems, which is one reason we redact personal data before sending and recommend you remove anything you consider highly sensitive before scanning.
What we do store
| Data | Why | How long |
|---|---|---|
| Your email address | To sign you in and attach credits to you | Until you ask us to delete your account |
| Credit balance | To know how many full reports you can run | Until used, expired, or deleted |
| Purchase records (reference number, number of reports, amount, the PayPal payment ID) | Receipts, refunds, and accounting | As long as tax and accounting rules require |
| Anonymous daily IP hash | To limit free scans and stop abuse. The hash is salted and changes every day; it cannot be turned back into your IP address | Rolling 24 hours of usefulness; rows are kept only as counters |
| Scan counts and token counts | To monitor cost and reliability. This is a number, not content | Up to 12 months |
| Contact form messages | So we can reply to you | Until resolved, then deleted within 12 months |
We never see or store your card number. Payments are handled by PayPal, our payment processor, under PayPal's privacy statement. Card payments without a PayPal account are also processed by PayPal.
Cookies
We set one cookie, cs_session, only after you sign in. It keeps you signed in for up to 90 days, is marked HttpOnly and Secure, and is not used for tracking. There are no advertising cookies, no analytics cookies, and no third-party tracking pixels. Our hosting provider, Cloudflare, gives us basic edge statistics (page views by country, for example) that are collected on the server side without cookies and without identifying you.
Signing in
We do not use passwords. When you sign in, we email you a one-time link that expires in 20 minutes. We store a hashed version of that link, never the link itself.
Your rights
Depending on where you live, laws such as the GDPR, the UK GDPR, the California Consumer Privacy Act, and similar laws in other countries give you rights over your personal data. We extend these rights to everyone, regardless of location:
- Access: ask for a copy of the data we hold about you.
- Correction: ask us to fix anything that is wrong.
- Deletion: ask us to delete your account and associated data. We will keep purchase records only where accounting law requires it.
- Objection and restriction: ask us to stop or limit how we use your data.
- Portability: receive your data in a standard format.
To exercise any of these rights, email privacy@contractscanner.app from the address on your account. We respond within 30 days. You also have the right to complain to your local data protection authority.
Legal basis for processing
Where the GDPR or similar laws apply, we process your email and purchase data to perform our contract with you, your scan text because you asked us to analyze it, and anonymous usage counters because we have a legitimate interest in keeping the service safe and affordable.
International transfers
Our servers run on Cloudflare's global network and the analysis is performed by Google. Your data may therefore be processed outside your country. Both providers offer contractual safeguards for international transfers.
Security
All traffic is encrypted. Our API keys are stored as server secrets and never reach your browser. Our database contains no contract text, so even a breach of it would not expose a single document.
Children
ContractScanner is for adults. You must be at least 18 years old to use it. We do not knowingly collect data from anyone under 18.
Changes to this policy
If we change this policy, we will update the date at the top and, for significant changes, note it on the site. Continuing to use ContractScanner after a change means you accept the updated policy.
Contact
Privacy questions: privacy@contractscanner.app
Everything else: support@contractscanner.app