Privacy Policy

The data controller responsible for your personal data is:

We collect the following categories of personal data:

• Account data: Name, email address, profile picture (via Clerk authentication)
• Contract data: Documents you upload for analysis. These are encrypted end-to-end and deleted after analysis unless you choose to store them.
• Usage data: Anonymized analytics about feature usage, analysis counts, and session information.
• Payment data: Processed by Stripe. We do not store credit card numbers.

We use your data exclusively to:

• Provide and maintain the contract analysis service
• Authenticate users and manage accounts
• Process payments and manage subscriptions
• Improve the service through anonymized analytics
• Communicate service updates and respond to inquiries
• Comply with legal obligations

We never sell, rent, or trade your personal data to third parties.

• Consent (Art. 6(1)(a)): For optional analytics cookies and marketing communications.
• Performance of contract (Art. 6(1)(b)): To provide the service you subscribed to.
• Legitimate interest (Art. 6(1)(f)): To maintain security and improve the service.
• Legal obligation (Art. 6(1)(c)): To comply with applicable laws.

Account data is retained as long as your account is active. Upon account deletion, all personal data is permanently deleted within 30 days. Uploaded contracts are deleted after analysis unless explicitly saved by you.

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data — "right to be forgotten" (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (Art. 7(3))

Contact us at privacy@joylegal.app. We respond within 30 days.