Privacy Policy

Account information: name, work email, organization name, and role, provided when you request access or complete onboarding.

Contributed contracts: contract documents, quotes, and pricing details you upload, plus the line items extracted from them (product, price, unit, seat counts, term, renewal dates).

Usage and technical data: log data such as IP address, browser type, and pages viewed, used for security and to operate the Service.

We use your information to operate the Service: authenticate you, review access requests, extract and normalize pricing you upload, show your own contract data back to you, send service emails (such as account approval and contract-renewal reminders), and maintain security. We use Contributed Data to build aggregated, anonymized market benchmarks — the low, average, and high prices shown to customers never identify you, your organization, or your documents.

When you upload a contract (or an administrator processes a public record), the document text is sent to Anthropic's Claude API to extract pricing fields, which you then review before anything is saved. We do not use your documents to train AI models. Anthropic processes API data under its commercial terms and does not train its models on this API traffic.

We share data only with the providers that run the Service:

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Anthropic — AI extraction of pricing fields from documents
• Resend — transactional email (account and renewal notices)
• Stripe — payment processing, when paid subscriptions are enabled

We do not sell personal information, and we do not share identifiable customer data with advertisers or data brokers.

Other customers see only aggregated statistics (for example, "average $112/user/month across 4 contracts") and curated public-record contract summaries. They never see your organization name, your uploaded documents, or your individual line items.

We keep account data and Contributed Data while your account is active. You may request deletion of your account and uploads at any time by emailing us; we will delete identifiable data within 30 days, except aggregated anonymized statistics already derived from it and records we must keep for legal reasons.

Data is encrypted in transit and at rest. Database access is controlled with row-level security so customers can only read their own submissions. Administrative access is limited to the operators of the Service.

We use only essential cookies required to keep you signed in. We do not run third-party advertising or tracking cookies.

You may request a copy, correction, or deletion of your personal information at any time. Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR. Contact us and we will respond within 30 days.

We will post any changes to this policy here and note material changes in-app or by email. Privacy questions or requests: support@mind-survey.com