Privacy Policy

ContractIQ (“we”, “us”) is operated by Synesthesia. This policy explains what we collect when you use ContractIQ, why we collect it, who processes it for us, how long we keep it, and the choices you have. It applies to our website, our mobile application, and our API.

Information we collect

• Account information. Your email address, and a password hash if you sign up with a password. If you sign in with Google, we receive your email address, name, and profile image from Google. If you use Sign in with Apple, we receive your email address (which may be an Apple private relay address) and, the first time only, your name.
• Contracts you upload. PDF, DOCX, and TXT files are read on your device and only the extracted text is sent to us; we do not store the original file. Scanned PDFs that contain no text are the exception: the file is uploaded to temporary storage so its pages can be read by our AI provider (see below), and it is deleted as soon as the text has been extracted.
• Details you provide. Optional metadata such as profession, state, contract type, years of experience, base pay, call expectations, location, and benefits notes, plus saved defaults in your preferences.
• What we generate and what you add. Analysis reports and risk scores, negotiation addenda, contract comparisons, version history, comments, negotiation outcomes you log, and locums assignments you track.
• Contract end dates. If you save an end date for a contract, we store it with the file name so we can send renewal reminders.
• Commute calculator addresses. Addresses you type into the commute tool are sent to Google Maps to suggest addresses and compute driving distance. We do not store them.
• Payment information. Payments are processed by Stripe. We store a Stripe customer identifier, subscription status and billing period, and payment records. We never receive or store your card number.
• Usage and security records. Audit records of significant actions (sign-ups, uploads, analyses, purchases, deletions), the IP address recorded with some of them, rate-limiting counters, and the date you accepted AI processing.

How we use your information

We use your information to analyze the contracts you submit, provide the features you use, process payments, send the emails you have asked for or that the service requires (email confirmation, analysis complete, document deletion warnings, contract expiry reminders, receipts, team invitations), enforce plan limits, and protect the service against abuse. We do not sell your personal information, we do not use your contracts for advertising, and we do not use them to train AI models.

AI processing

ContractIQ uses Anthropic’s Claude models. Before your first upload we ask you to agree to this. When you request an analysis, a negotiation addendum, or a comparison of two contract versions, the relevant contract text and the details you provided are sent to Anthropic and the result is returned to us. For a scanned PDF, the page images are sent to Anthropic to extract the text. Under Anthropic’s commercial terms, data sent through its API is not used to train its models and is retained by Anthropic only for a limited period. AI output can be incomplete or wrong; see our Terms.

Service providers (subprocessors)

• Anthropic — AI analysis of contract text, and text extraction from scanned PDFs.
• Vercel — application hosting, and Vercel Blob for temporary storage of scanned PDFs during text extraction.
• Our managed PostgreSQL database provider — storage of your account and the data described above.
• Stripe — payment processing and subscription billing.
• Resend — delivery of the emails listed above.
• Google — optional Google sign-in, and Google Maps Platform for the commute calculator (only the addresses you type).
• Apple — optional Sign in with Apple.

These providers process data on our behalf under their own terms and security commitments.

Security

Data is transmitted over HTTPS (TLS 1.2 or later). The extracted text of your contracts is additionally encrypted by our application with AES-256-GCM, using a unique initialization vector per record. Other stored data, including analysis reports (which can contain short quotes from your contract and compensation details), comments, comparisons, and the details you provide, is not encrypted by our application; it is protected by the storage encryption of our hosting and database providers. Access to production systems is restricted. No system can be guaranteed perfectly secure, and you should not upload documents you are not permitted to share.

Retention and deletion

• Automatic deletion after 30 days. Each uploaded contract is deleted 30 days after upload, together with its extracted text, analysis report, negotiation addenda, comments on that report, comparisons that include it, its logged negotiation outcome, and its version-history entry. Locums assignments linked to it are kept but unlinked. If email notifications are on, we email you about 3 days before.
• Contract end dates. If you saved an end date, we keep only the file name and end date after the contract is deleted, so we can send reminders 90, 60, and 30 days before it. We delete that record the day after the end date, or immediately if you delete the contract or your data.
• Delete a contract. From your dashboard, at any time. This removes the contract and everything derived from it, as described above, immediately.
• Delete all my data. From Settings. This removes all of your contracts and everything derived from them, plus your comparisons, the comments you wrote, locums assignments, negotiation outcomes, version history, reminders, and activity history. Your account, preferences, API keys, team membership, and payment records remain.
• Delete my account. From Settings. We first cancel any active subscription with Stripe (if that fails, the account is not deleted and we tell you), revoke Sign in with Apple, and then delete everything above along with your profile, preferences, API keys, sessions, team memberships, and our payment records. Stripe keeps its own records of past transactions as the law requires.
• To enforce free-plan limits, a record that an analysis was started (with no contract details, file name, or IP address) is kept for up to 30 days even after you delete a contract or your data.
• Deleted data can persist in our providers’ backups for a limited period before it is overwritten. Data already sent to Anthropic is handled under Anthropic’s retention terms.

Your rights

Depending on where you live, you may have the right to access, correct, obtain a copy of, or delete your personal information, and to object to or restrict certain processing. The deletion controls in Settings, and the PDF download on each unlocked report, cover many of these requests directly. You can also withdraw your AI-processing consent; new uploads will then be paused until you agree again. For a copy of your data or anything else, contact us at support@contractiq360.com.

Children

ContractIQ is intended for practicing and training healthcare professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes to this policy

If we make material changes we will update the date above and, where appropriate, notify you in the app or by email.

Contact

Questions about this policy or your data: support@contractiq360.com.