Privacy Policy

Last updated: 9/8/2026

1. Information We Collect

We collect information you provide directly to us when you create an account, such as your email address (for magic link authentication or Google SSO). We also collect the contracts and documents you upload to our platform for analysis.

2. How We Protect Your Data

Your data security is our top priority. All documents uploaded to Initialed AI are encrypted both in transit and at rest. We use industry-standard security measures to ensure your confidential contracts remain private.

3. How We Use Your Data

We retain the account information, the documents you upload, and the analysis we generate, and we use them to operate and improve the Service. This includes:

• Providing, maintaining, and securing the Service.
• Troubleshooting technical issues and errors.
• Improving the quality and accuracy of our contract analysis, and developing new features.
• Understanding feature usage through product telemetry.

We do not sell your personal data or the contents of your documents.

4. AI Processing and Providers

To generate a review, the contents of your document are sent to third-party AI providers (currently Google Gemini) that process it on our behalf. These providers handle your data under their own terms and data-processing agreements. We do not control, and cannot guarantee, how long a provider retains data or whether it is used for their own purposes such as abuse monitoring — you should review the applicable provider's terms. We do not claim a zero-data-retention arrangement with our AI providers.

5. Retention and Deletion

We retain your documents and account data for as long as your account is active or as needed to provide the Service. You can delete individual documents, or your entire account, at any time; deletion removes them from our systems, though residual copies may persist for up to 30 days in encrypted backups before being overwritten. We may retain limited records for longer where required to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Third-Party Subprocessors

We use selected third-party services to help provide our platform. You can find a list of these services on our Subprocessors page.

7. International Data Transfers

We operate in the United States, and our subprocessors may process your data in the United States and other countries. If you access the Service from the European Economic Area, the United Kingdom, or Switzerland, your personal data may be transferred outside your home country. Where such transfers occur, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or another lawful transfer mechanism, to protect your data.

8. Security and Breach Notification

We use industry-standard administrative, technical, and physical safeguards, including encryption in transit and at rest, to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and any relevant authority as required by, and within the timeframes set by, applicable law.

9. Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

10. Cookies and Similar Technologies

We use strictly necessary cookies, plus analytics and marketing cookies if you allow them. You can accept, reject, or customize non-essential cookies from the consent banner, and change your choice anytime via “Cookie preferences” in the footer or on the Cookie & Privacy Preferences page. We honor Global Privacy Control (GPC) signals as an opt-out of non-essential cookies.

• Strictly necessary (always active, no consent needed): keeping you signed in and remembering your cookie choice.
• Analytics & session replay (off until you opt in): understanding how the Service is used so we can improve it. This includes Google Analytics; we disable its advertising and cross-device features, and you can read how Google uses this data at policies.google.com/technologies/partner-sites.
• Marketing & targeting (off until you opt in): with your consent, we and our advertising partners may use these to measure and improve our marketing, promote our services, and show you relevant content and offers on our site and on third-party platforms. We may combine this with other information we hold about you for these purposes.

A current list of the specific providers we use is on our Subprocessors page.

11. Your Rights (EEA / UK — GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, or export your personal data; to restrict or object to processing; and to withdraw consent at any time (without affecting processing already carried out). Our legal bases are your consent (for optional analytics), performance of our contract with you (to provide the Service), and our legitimate interests (to secure and improve the Service). You may also lodge a complaint with your local supervisory authority.

12. Your Rights (California — CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. If you opt in to marketing and targeting cookies, some information may be “shared” for cross-context behavioral advertising as defined under the CPRA; you can opt out at any time via “Cookie preferences,” and we honor Global Privacy Control signals. We will not discriminate against you for exercising these rights.

13. Exercising Your Rights

You can delete individual documents or your entire account directly in the app. For any other request under this section, email us at hello@initialed.ai and we will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

Questions about your privacy? Contact us at hello@initialed.ai.