Privacy Policy
This page summarizes the Contract Flash privacy policy for indexing. The full policy is published on the page itself and is the authoritative version.
Contract Flash collects account information, the contract content you upload, and product usage data. Contract content is processed to provide extraction, search, drafting, and signature features, and is never sold and never used to train AI models.
Subprocessors are disclosed publicly, and individuals have access, correction, deletion, and portability rights under GDPR and CCPA.
Frequently asked questions
Does Contract Flash sell personal data?
No. Contract Flash does not sell personal data and does not share it for cross-context behavioral advertising.
Is contract content used to train AI models?
No. Contract content is processed by AI providers under API terms that prohibit training on submitted data, and Contract Flash does not train models on customer content.
What rights do I have over my data?
Under GDPR and CCPA you can request access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or restrict certain processing. Requests are handled through the contact address published in the privacy policy.
Where is Contract Flash data stored?
Application hosting is with Hetzner, the database is hosted by Neon, and files are stored in Cloudflare R2. The subprocessors page lists each provider with its purpose and the category of data it handles.
How long does Contract Flash retain my data?
Data is retained for as long as the account is active, plus the limited period described in the privacy policy for backups and legal obligations. You can delete contracts at any time and request full deletion of your organization's data from Settings.