Privacy Policy

• Account — your email address and name.
• The contracts you upload — these can be sensitive documents.
• Analyses we generate and your document-chat messages (these include excerpts from your contracts).
• Technical — an authentication session cookie and coarse usage counters.

We process your data to provide the service — analyzing the contracts you submit. Our legal basis is performance of a contract (GDPR Art. 6(1)(b) / KVKK Art. 5) and, where needed, your consent (GDPR Art. 6(1)(a) / KVKK explicit consent).

Uploaded documents and their analyses are automatically deleted after 30 days. You can delete any document yourself at any time. Deleting your account erases all of your data (see Your rights). We keep your account email only while your account exists.

We use trusted processors to run the service: Anthropic (AI analysis), Supabase (database, authentication, storage), and Vercel (hosting). Each acts as a data processor on our behalf. We never sell your data.

Our processors may handle data outside your country (including the United States). Such transfers rely on appropriate safeguards (for example, Standard Contractual Clauses) under GDPR Chapter V and KVKK Art. 9.

Your documents are analyzed using the Anthropic Claude API. Models are not trained on your data. Your data is only processed briefly — Anthropic retains it for a short period (around 7 days) and then deletes it. Separately, FixMyContract deletes your documents and analyses after 30 days, and whenever you delete them yourself.

Your data is encrypted in transit (TLS) and at rest. Access is scoped to your own account, so other users can never see your documents or analyses.

You can access, correct, delete, port, or object to the processing of your data (KVKK Art. 11 / GDPR Art. 15–22). To exercise them:

• Delete everything yourself — go to Settings → Delete my account (permanent and immediate).
• Other requests — email privacy@fixmycontract.com. We respond within 30 days (GDPR one month / KVKK 30 days).

You have the right to complain to a supervisory authority — the Personal Data Protection Authority (KVKK Kurumu) in Türkiye, or your local data-protection authority in the EU.

We use a single authentication session cookie (via Supabase) to keep you signed in. We don't use third-party advertising or tracking cookies.

FixMyContract is not directed to anyone under 18.

We may update this policy from time to time; the version and “last updated” date appear at the top, and we'll note any material changes.