Privacy Policy

1. Who we are

Signwise is a digital service that helps individuals understand the legal documents they are asked to sign, contracts, NDAs, leases, terms of service, and more. We provide plain-language analysis so that anyone, regardless of legal background, can make informed decisions before agreeing to something. Signwise is operated as a sole trader registered under Italian law. For any privacy-related enquiries, please contact us at support@signwise.io.

2. What data we collect

• Email address — collected when you request your first free analysis or create an account.
• Phone number — optional, collected at registration.
• Payment data — processed entirely by Stripe. We never see or store your card details.
• Document content — never stored. Documents are processed in-memory and immediately discarded after analysis.
• Usage data — anonymous request logs (IP address, timestamp, endpoint) retained for up to 30 days for security and rate-limiting purposes.
• Reviews — if you submit a review, we store your rating, review text, and contract type alongside your user ID.

3. Legal basis for processing (GDPR)

• Email and account data: Contract — necessary to provide the service.
• Payment data: Contract — necessary to process your purchase.
• Security logs: Legitimate interest — protecting the service from abuse.
• Reviews: Consent — you voluntarily submit them.

4. Third-party services

• Supabase — database hosted in Frankfurt, EU (AWS eu-central-1). Your email and credit balance are stored here.
• Stripe — payment processing. Subject to Stripe's own privacy policy.
• Anthropic — Document text is sent to Anthropic's API and subject to their data processing agreement. Documents are not used for model training under Anthropic's API terms.

5. Data retention

• Account data (email, credits): retained while your account is active.
• Transaction records: retained for 7 years for legal/tax compliance.
• Security logs: deleted after 30 days.
• Document content: never retained, deleted immediately after analysis.

6. Your rights (GDPR)

As an EU resident you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Object to processing based on legitimate interest
• Data portability

To exercise any right, email support@signwise.io. We will respond within 30 days.

7. Cookies

We use strictly necessary cookies only (session management). We do not use tracking, advertising, or analytics cookies. See our cookie consent banner for details.

8. Changes to this policy

We may update this policy. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by email.