Privacy Policy

Who we are

Fair Contracts is a tool that explains contracts in plain language. This policy describes what we do with your data. It is written to be read, not to hide things.

The data controller is Trailbits SRL, registered in Romania at Sat Feleacu, Comuna Feleacu, Nr. 677C, Jud. Cluj, România, CIF RO55107625, trade register J2026042527004. For anything about your data, contact us at contact@fair-contracts.com.

Your documents

The contracts you analyze are processed only to produce your analysis. We do not sell them, and we do not use them to train AI models.

To be exact about where your document goes, because "it stays in your browser" would be easier to say and would not be true: the file is read in your browser, and its text is then sent to our server, which is what produces the analysis. What differs between modes is what happens next. Signed out, we keep no copy — the analysis and its history are saved in your device's local storage, and closing the tab leaves nothing of the document on our side. Two exceptions are named below: a paid report, and a scan.

If you sign in (cloud mode), your account, analyses and usage are stored in our database, hosted by Railway in its EU (Amsterdam) region, so they sync across your devices. That stored analysis includes the text of your document itself — it has to, so your history, cross-device sync, and chat about the document keep working. The text is deleted when you delete the analysis or your account, remains private to your account, and is never used to train AI models.

Paid reports, whether or not you are signed in. When you pay to unlock a report, we store that report against the payment for up to 30 days, encrypted. This exists so that a report you paid for is not lost if your connection drops before it reaches you — you retry and get the same report back rather than paying again. It is deleted after 30 days, or with your account if you have one. Where the document was a scan, the text we read off the pages is stored the same way and for the same reason.

Other people in your documents. A contract names more than one person — a landlord, an employer, the other party. Their details reach us as part of your document, and we process them only to produce your report, keep them exactly as long as we keep the document itself, and never use them for anything else. If you are named in a document someone else analyzed and would rather not be, write to us and we will tell you what, if anything, is still held and remove it.

Scanned files in transit. To read a scan, your browser sends the file to our server with the request itself. It is held in memory only while the pages are read, and is never written to disk or to any storage — on every outcome, including a failure. It is a transit copy, not a stored document.

Who processes data for us

We use a small number of service providers, each for one job:

• Anthropic — AI analysis. When real-AI analysis is enabled, your document text is sent to Anthropic solely to generate the analysis and answer your questions. For scanned documents, the page images themselves (not just extracted text) are sent so the AI can read them — and only after you explicitly consent for that specific document. Nothing sent to Anthropic is retained for training. In demo mode — the bundled sample analyses, with no AI key configured — no document is sent to Anthropic at all.
• Resend — email delivery: sign-in links, deadline reminders, and onboarding emails. Every onboarding or marketing email we send contains an unsubscribe link, and you can also switch marketing email off from your account page; either route stops those emails immediately. Sign-in links and the reminders you asked for are transactional and continue while you use the service.
• Stripe — payments. When you buy something, Stripe receives your payment details directly, and the fact that you bought a Fair Contracts product. We never see your card number. Stripe is an independent controller for its own fraud-prevention and regulatory purposes; its own privacy policy applies to that part. At checkout Stripe also collects your billing name and address (and, for a Business plan, your VAT number), because the invoice needs them.
• SmartBill (Intelligent IT SRL, Romania) — invoicing. For every payment, SmartBill issues our fiscal invoice and emails it to you, and files it with the Romanian tax authority (e-Factura) where the law requires. It receives the invoice data only: your name, billing address, email address, the amount paid and the VAT, and — for a business — your VAT number. Never your documents or your card. SmartBill stores data in the EU, and invoices are kept for as long as Romanian accounting and tax law requires.
• Railway — hosting and database. The app and its database run on Railway, in its EU (Amsterdam) region. Railway processes the ordinary request data any web host sees, including your IP address, to deliver pages and keep the service available, and stores the account data described above when you sign in. Sign-in itself runs inside our own app: no separate authentication provider receives your address. Request counting for abuse protection happens inside the app on that server: per IP address, for a few minutes at a time, never linked to your account.
• Cloudflare (Cloudflare, Inc.) — off-site backups. Once a night a copy of our database is stored in a private Cloudflare R2 bucket restricted to the EU, so the service can be recovered if the database is ever lost. It holds the same account data as the database. The full text of any document you store stays encrypted inside the backup with our own key, which Cloudflare does not have; everything else, including the analyses, is protected by Cloudflare's storage encryption and a private bucket whose access key is used for nothing but backups and restores. Daily copies are kept for 30 days and one copy per month for 12 months, then deleted automatically.
• Sentry (Functional Software, Inc.) — error reporting. When the app crashes or an error occurs, a technical report is sent to Sentry so we can fix it: the error message and where in our code it happened, the page address, and your browser and operating system. It is configured not to collect personal data — no IP address is stored, no screen or session recordings, and no document content. Reports are stored in Sentry's EU (Germany) region and kept for no more than 90 days.

Sending data outside the EU

Most of your data stays in the EU: the app server, the database, its backups, the email provider, the invoicing provider and our error reports are all EU-hosted. Two things are not. The AI analysis is performed by Anthropic, whose infrastructure is in the United States, so a document you ask us to analyze is transferred there for that purpose. Payment processing involves Stripe, which also operates outside the EU.

Those transfers are covered by the European Commission's Standard Contractual Clauses in our agreements with each provider, which is the safeguard the GDPR provides for exactly this situation. You can ask us for a copy of the relevant terms. If you would rather a particular document did not leave the EU, do not submit it — the sample contracts demonstrate the same functionality on documents that are ours rather than yours.

How long we keep data

In local mode, your data lives on your own device until you delete it — we hold nothing. In cloud mode, your account and analyses are kept until you delete your account. Deletion is immediate and permanent, and removes everything we hold about you: your account and profile, your analyses (including document text), your purchases and entitlements, your usage counters, your analytics events, our log of emails sent to you, your waitlist entry, and your address in our email audience. It also removes any full report we were holding against a payment, and the analytics events you generated before you signed in.

Two things survive, and both are required by law rather than chosen by us. Invoices and payment records are kept for the period Romanian tax and accounting law requires, because we are obliged to keep them (GDPR art. 17(3)(b)). And Stripe keeps its own record of your payments as an independent controller under its own policy. Neither is used for anything else, and neither contains your documents.

Some records also expire on their own: analytics events and the email log are kept for at most 24 months and then purged — or deleted with your account, whichever comes first. A waitlist entry is kept until we have fulfilled what you signed up for, or until you unsubscribe.

One honest caveat about "permanent": deletion removes your data from the live service at once, but encrypted database backups are kept for disaster recovery — daily copies for 30 days and one copy per month for 12 months — and a copy may persist there until that backup expires. Those backups are not used for anything else and are never mined; they are only ever restored wholesale after a failure.

Cookies and what is stored in your browser

The complete list. There is no advertising or cross-site tracking technology here, and nothing below is shared with anyone.

The last three are browser storage rather than cookies — they never travel to our servers with a request. Clearing site data in your browser removes all of them; the ones marked strictly necessary will come back as you use the service, because without them it cannot do what you asked.

Analytics and consent

Our analytics are first-party only: no ad-tech, no third-party trackers, no cross-site anything, and they run only with your consent. In local mode, events carry only a random anonymous id that identifies a browser, not a person. If you are signed in, events are linked to your account for as long as you have one — that is how we can delete them when you delete your account, and they are deleted with it. The cookies that keep you signed in and record your plan are strictly necessary for the service to work and do not require consent.

Separately from analytics, and regardless of consent, we process your IP address briefly to rate-limit requests and detect abuse. That is not tracking and is not linked to your analyses; it is what stops one caller from exhausting a service everyone else is using.

Your rights (GDPR)

You have the right to access, rectify, and erase your data, to receive it in a portable format, and to restrict or object to its processing. The fastest route for most of these: export all of your data as a file, or delete your account and everything associated with it, from the account page. Deletion is immediate and permanent.

Automated processing (art. 13(2)(f) and art. 22). The fairness score, the risk flags and the clause explanations are produced automatically by an AI model, with no human reviewing them before you see them. They are information about a document, not a decision about you: nothing here decides whether you get credit, a job, a tenancy or a service, and no legal or similarly significant effect is produced for you by the automation. You are always the one who decides what to do with a report.

You also have the right to complain to a supervisory authority. Our lead authority is Romania's ANSPDCP (dataprotection.ro), and you can always contact the data protection authority of your own EU country instead.

Why we are allowed to process your data

Three legal bases, each for what you would expect: performance of a contract — producing the analysis you asked for and running your account; your consent — analytics and any marketing email, both of which you can withdraw at any time; and our legitimate interest in keeping the service secure and preventing abuse.

Contact

Questions about your data? Write to us at contact@fair-contracts.com. This policy may be updated; the date above always reflects the current version.