1. The Information We Gather When You Use Contractra

To provide you with our service and make it work well for you, we need to collect certain types of information. Let us walk through exactly what we collect and why each piece matters.

Personal Information You Give Us Directly

When you create an account with Contractra, you provide us with basic information that lets us set up and manage your account. This includes your name, which helps us personalize your experience and communicate with you as an individual rather than just an account number. We collect your email address because it serves as your username and allows us to send you important information about your account, respond to your questions, and notify you about service updates that affect you. You create a password that secures your account and keeps your information private from others.

If you choose to use our paid features, we collect billing information so we can process your payments. This includes details like your billing address and payment method information. However, we want you to know that we do not directly handle your credit card numbers or banking details ourselves. We use trusted third-party payment processors like Stripe or PayPal who specialize in secure payment handling. They process the sensitive financial information according to strict security standards, and we only receive confirmation that your payment was successful along with basic transaction records.

You might also provide additional profile information to make your experience better. This could include your company name if you are using Contractra for business purposes, information about your industry that helps us provide more relevant insights, or preferences about how you want the service to work for you.

When you contact our customer support team or send us feedback, we keep records of those communications. This helps us resolve your issues effectively, improve our service based on what you tell us, and maintain a history of our interactions with you in case you need to follow up on something later.

The Documents and Contracts You Upload

The heart of what Contractra does involves the documents you upload for analysis. When you upload a contract or legal document, we obviously receive the document itself with all its contents. We also collect what we call metadata about these documents. Metadata is information about the document rather than the content within it. This includes technical details like what type of file it is, when you uploaded it, how large the file is, and what name you gave it. We also store the analysis results that our artificial intelligence generates from your document, along with any notes, highlights, or annotations you create while reviewing the analysis.

Information Our Systems Collect Automatically

Even when you are not actively uploading documents or adjusting settings, our systems collect certain information automatically to make the service work properly and improve your experience. We track usage data that shows us how you interact with Contractra. This includes which features you use most often, how much time you spend on different parts of the service, what actions you take, and how you navigate through the interface. This information helps us understand what is working well and what might be confusing or difficult to use.

Your device sends us technical information whenever you connect to Contractra. We can see your IP address, which is the numerical identifier assigned to your internet connection. We learn what type of browser you are using, what operating system runs on your device, and unique identifiers that distinguish your device from others. This information helps us ensure Contractra works properly on your specific setup and helps us identify and fix technical problems.

We use cookies and similar technologies on our website and in our service. Cookies are small pieces of data stored on your device that remember things about you between visits. Some cookies are essential for the service to work at all. For example, session cookies remember that you are logged in as you move between different pages. Other cookies remember your preferences so you do not have to set them again each time you visit. We also use analytics cookies that help us understand how people use Contractra in general, though this data is aggregated and anonymized so we cannot identify you personally from it.

Our systems create log files that record technical events and activities. These logs capture things like when you accessed the service, what actions triggered errors, how quickly different features performed, and other technical metrics. These logs are essential for maintaining service security, diagnosing problems when something goes wrong, and ensuring everything runs smoothly.

2. Why We Need Your Information and What We Do With It

Every piece of information we collect serves specific purposes that either deliver the service you are paying for or help us make that service better. Let us explain exactly how we use your information.

Providing the Core Service You Came For

The primary reason we need your information is to deliver the contract analysis service that brought you to Contractra in the first place. When you upload a document, our artificial intelligence systems need to process that document to generate insights, summaries, and risk assessments. We use your account information to save your documents and analysis results so you can access them again later. We need to maintain your preferences and settings so the service works the way you want it to. When you contact our support team with questions or problems, we use your information to understand your situation and help you effectively.

Making Contractra Better Over Time

We use certain information to improve how Contractra works, though we want to be very clear about the limits here. We analyze usage patterns to understand which features people find most valuable and which ones cause confusion. This helps us prioritize what to improve and what new features to build. We look at how people interact with the interface to make the experience more intuitive and user-friendly. We monitor technical performance to identify and fix bugs, optimize speed, and ensure reliability.

Here is something critical we want you to understand. While we do use information to improve our service, we absolutely do not use your specific uploaded documents to train our artificial intelligence models. Your contracts remain your private property. When we improve our AI, we do so through other methods that do not involve learning from your confidential documents. We might use anonymized, aggregated data about usage patterns, but never the actual content of the contracts you have entrusted to us.

Running Our Business Operations

Like any business, we need certain information to operate effectively and legally. We process your payment information to handle billing for subscriptions and additional features you purchase. We send you service-related communications such as confirmations when you sign up, notifications when your subscription is about to renew, and alerts about important security or service issues that affect your account. We need to comply with legal obligations that require us to maintain certain records and respond to valid legal requests. We work to prevent fraud, abuse, and security threats by monitoring for suspicious activity and protecting both your account and our systems from malicious users.

Marketing Communications You Can Control

If you have given us permission, we might send you marketing emails about new features, product updates, helpful tips for using Contractra, or special offers. This is always optional, and you have complete control over these communications. Every marketing email we send includes an unsubscribe link that lets you opt out immediately. You can also manage your email preferences in your account settings at any time. If you opt out of marketing emails, we will still send you essential service-related communications that you need to receive as a user, such as security alerts or billing notifications.

3. Our Most Important Commitments About Your Documents

Your contracts and legal documents are sensitive and confidential. We understand that you might be uploading employment agreements, business contracts, property leases, or other documents containing private information. We want to make absolutely clear commitments about how we handle these documents.

We Never Use Your Documents to Train Our AI. This is perhaps the most important promise we make to you. Your uploaded documents are never, ever used to train or improve our artificial intelligence models. Your documents are processed solely to give you the analysis you have requested, period.

We Never Sell or Share Your Documents. We do not sell your documents to anyone. We do not share them with other companies. We do not publish them or make them available to other users. The only circumstances under which we would ever disclose your documents to a third party would be if we were legally required to do so by a valid court order, subpoena, or similar legal process.

We Only Access Your Documents When Absolutely Necessary. Our general policy is that we do not look at your uploaded documents. Your documents are processed by our automated systems, not read by human employees. Limited exceptions include technical support requests you initiate, security investigations, or compliance with legal obligations.

Your Documents Are Encrypted and Secure. We protect your documents using strong encryption technology. Uploads are encrypted in transit using TLS 1.3, and stored using AES-256 encryption. Even if someone somehow gained unauthorized access to our storage systems, they would only find encrypted files they cannot read without the proper decryption keys.

4. Where We Store Your Information and How We Keep It Safe

Understanding where your data lives physically and how we protect it can help you feel confident about using our service.

Data Storage Location. All of your information, including your documents, account details, and analysis results, is stored on secure servers located in Australia, primarily in the Sydney region. Backups are also encrypted and retained within Australian data centers.

Security Measures We Have Implemented. All data is encrypted in transit and at rest. Passwords are hashed and never stored in readable form. Multi-factor authentication is available. We perform regular security audits, penetration testing, and maintain strict internal access controls.

How Long We Keep Your Information. We retain information while your account is active. Deleted documents are removed from active systems within thirty days and from backups within ninety days. Certain transactional records may be retained longer to comply with legal obligations. Anonymized data may be kept indefinitely.

5. The Limited Ways We Share Information

While we do not sell your information or share it casually, running a modern online service requires working with certain trusted third-party companies who help us operate.

Service Providers Who Help Us Operate. Payment processors handle billing securely. Cloud hosting providers supply infrastructure without accessing your data. Analytics tools provide aggregated usage insights. Customer support platforms help us manage communications. Every provider is bound by confidentiality and data protection agreements.

Legal Requirements. We may disclose information when required by law, to protect rights, safety, or property, or in response to valid legal processes. In the event of a corporate transaction, we will notify you before transferring your information.

Sharing You Have Explicitly Authorized. If you choose to enable third-party integrations, we will share the necessary information only with your consent so those integrations can function.

6. Your Rights and How to Exercise Them

You have significant rights regarding your personal information under Australian privacy law and other applicable regulations.

Accessing Your Information. You can request a copy of the personal information we hold about you. Many details are available directly in your account, and we can provide a complete export upon request.

Correcting Inaccurate Information. You can update most information yourself via account settings or contact us to correct anything you cannot change directly.

Deleting Your Information. You can delete specific documents or your entire account. We process deletion requests promptly, within thirty days where possible, subject to legal retention requirements.

Exporting Your Data. We provide your data in common machine-readable formats when you exercise data portability rights.

Restricting or Objecting to Processing. You can limit certain processing activities or object to marketing communications at any time. Essential service communications will still be sent.

How to Exercise These Rights. Use your account settings or contact us at privacy@contractra.com.au. We may need to verify your identity and respond within thirty days.

7. Cookies and How We Track Usage

Cookies are an essential part of how modern websites work, but they are also a privacy concern for many people. We use cookies to keep you logged in, remember preferences, and understand overall usage patterns.

Essential cookies keep the service functioning. Analytics cookies provide aggregated insights. Preference cookies store your choices. Marketing cookies are optional and rely on your consent.

You can control cookies through browser settings, industry opt-outs, and preferences within your Contractra account. Disabling essential cookies will prevent the service from functioning correctly.

8. Links to Other Websites and Third-Party Services

Contractra may contain links to other websites or integrate with third-party services. When you follow those links or enable integrations, their privacy policies apply. We encourage you to review those policies carefully. Sharing with third-party integrations only occurs if you explicitly authorize it.

9. Transferring Data Internationally

We primarily store data in Australia, but some third-party service providers may operate elsewhere. When data is transferred internationally, we use legal mechanisms such as standard contractual clauses and obtain consent where required to ensure your information remains protected.

10. Protecting Children's Privacy

Contractra is designed for adults and is not intended for anyone under eighteen years old. We do not knowingly collect personal information from minors. If we learn that information has been collected from someone under eighteen without consent, we will delete it promptly.

11. How Artificial Intelligence and Automated Systems Work in Contractra

Our AI systems automatically analyze the documents you upload to identify clauses, assess risks, and generate explanations. These outputs are informational and advisory; they do not create legal obligations or decisions. You remain in full control, and human review is available upon request.

12. What Happens If There Is a Data Breach

If we experience a data breach that affects your personal information, we will notify you and relevant authorities as required by law. Notifications will explain what happened, what information was involved, the actions we are taking, and what you can do to protect yourself.

13. What Happens to Your Data If Contractra Changes Ownership

If Contractra is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will notify you beforehand and give you the chance to delete your data if you do not want it transferred. Successor entities must honor our existing privacy commitments unless you agree otherwise.

14. Changes to This Privacy Policy

We may update this Privacy Policy as laws change or as we add features. The "Last Updated" date reflects the latest revision. Material changes will be communicated through email or prominent notices, and continued use of Contractra constitutes acceptance. If you disagree with changes, you can delete your account.

15. How to Contact Us and File Complaints

If you have questions about this Privacy Policy, concerns about how we handle your data, or want to exercise your rights, contact us at privacy@contractra.com.au or write to us at 477 Pitt St, Haymarket NSW 2000. We aim to respond within thirty days.

If we cannot resolve your complaint, you can contact the Office of the Australian Information Commissioner (OAIC) via www.oaic.gov.au, telephone 1300 363 992, or mail GPO Box 5218, Sydney NSW 2001.

16. Your Consent and Agreement

By creating an account with Contractra and using our service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use Contractra. You may delete your account at any time if our practices no longer meet your expectations.

Thank you for trusting Contractra with your contracts and personal information. We take that trust seriously and are committed to protecting your privacy while providing valuable insights into your legal documents.