Privacy Policy

1. What We Collect

When you use ContractGuard, we collect the following information:

• Email address — used to create and identify your account
• Password — stored as a one-way cryptographic hash; we never store your actual password
• Query history — the questions you submit to our tools and the responses generated
• Feedback — any thumbs up or thumbs down ratings you submit on responses
• Submitted rulings — grievance outcomes you submit through the Union Knowledge feature (rep accounts only)
• Usage data — query counts and timestamps used to enforce daily limits and monitor service health
• Waitlist email — if you signed up for the waitlist before account access was available

2. How We Use Your Data

Your data is used solely to operate and improve ContractGuard:

• To provide contract guidance and scheduling defense responses
• To enforce daily query limits per account
• To allow admins to review query history for quality control and abuse prevention
• To moderate submitted rulings before they are published in Union Knowledge
• To display your usage quota on your profile page

We do not use your data for advertising, and we do not sell or share your data with third parties for marketing purposes.

3. Third-Party Services

Anthropic (Claude): When you submit a question, your query text is sent to Anthropic's API to generate a response. Anthropic processes this data according to their own privacy policy. We do not send your email address or account information to Anthropic.

Railway: ContractGuard is hosted on Railway's infrastructure. Your data is stored on Railway's servers. Railway processes data in accordance with their privacy policy.

No other third parties receive your data.

4. Data Retention

Your account data and query history are retained for as long as your account is active. If you request account deletion, your data will be permanently removed. Query history may be retained in anonymized or aggregated form for service improvement purposes.

5. Your Rights

You can update your password at any time from your Profile page. To request deletion of your account and all associated data, contact us using the information below. We will process deletion requests promptly.

6. Security

Passwords are hashed using bcrypt and never stored in plaintext. All connections are served over HTTPS. Access to query history and user data is restricted to authorized administrators only.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the most recent revision. Continued use of ContractGuard after changes are posted constitutes acceptance of the updated policy.

8. Contact

If you have questions about this Privacy Policy or want to request account deletion, please reach out through the ContractGuard website or contact the administrator directly.