Privacy Policy

Account information. When you create an account, we collect your full name, email address, and company name. If you accept an invitation to join an existing team, we associate your account with that company.

Uploaded content. Contract documents (PDFs) you upload, the playbook rules you create or import, and any notes or status changes you record against analysis findings.

Billing information. If you subscribe to a paid plan, billing data (cardholder name, last four digits of payment card, billing address, subscription status) is collected and processed by Stripe. We do not store full payment card numbers on our servers.

Usage data. We log basic usage events — analyses run, playbook edits, checklist updates, login times — for operational metrics, billing enforcement, and security auditing.

• To provide the Service: authenticate you, run AI analyses on your contracts, deliver results, and enable team collaboration.
• To bill you: process subscription payments, enforce plan limits, send billing-related emails (receipts, payment failures, renewal notices).
• To improve the Service: aggregate, anonymized usage metrics inform product decisions. We do not train AI models on your contract content.
• To support you: respond to questions or troubleshoot issues you report.
• To meet legal obligations: comply with tax, audit, and law-enforcement requests when legally required.

Contracts you upload are processed by Anthropic's Claude API to generate the analysis. When you trigger an analysis, the contract content is transmitted to Anthropic's servers for inference, and the result is returned to our application and stored against your company's account.

For more details, see Anthropic's privacy policy.

Your account data and uploaded contracts are stored in encrypted form on Supabase, a SOC 2 compliant managed Postgres and object-storage provider based in the United States. Connections to the Service use HTTPS/TLS encryption in transit, and all data at rest is encrypted by the storage provider.

We use row-level security policies to enforce strict per-company data isolation — your contracts and analyses are never accessible to other customers, even other tenants on the same database instance.

Access to production data by Crown Intel personnel is limited, logged, and used only for support, debugging, or compliance purposes.

We do not sell or rent your personal information or contract content. We share data only with the following service providers, and only as needed to operate the Service:

• Anthropic (AI inference) — contract text sent to the Claude API at the time of analysis. Zero retention after response.
• Supabase (database & storage) — account data, contracts, and analysis results stored encrypted.
• Stripe (billing) — billing details for paid plans. Stripe handles payment card storage and PCI compliance.
• Vercel (application hosting) — the Crown Contracts web application runs on Vercel infrastructure.

We may disclose information when required by law, valid legal process, or to protect the rights, safety, or property of Crown Intel, our users, or the public.

We use minimal cookies — only what's required to keep you signed in and remember your theme preference. We do not use advertising cookies, third-party tracking pixels, or analytics cookies that profile your behavior. No cookie consent banner is shown because no consent-required cookies are set.

We retain your account data and uploaded content for as long as your account is active. When you delete your account or terminate your subscription, we retain your data for up to thirty (30) days to allow recovery on request, after which it is permanently deleted from our active systems. Encrypted backups may persist for up to ninety (90) days under standard rotation before being overwritten.

Usage logs and billing records may be retained longer where required for legal, tax, or audit purposes.

You have the right to:

• Access the personal information we hold about you.
• Correct or update your account information from the settings page.
• Export your contract data and analysis results (contact support).
• Delete your account and associated data.
• Object to or restrict certain processing where applicable under your local law.

To exercise any of these rights, email support@crownintel.co. We will respond within thirty (30) days.

The Service is intended for business use and is not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated via email and posted on this page. The “Last updated” date at the top reflects the most recent revision.

Questions about this Privacy Policy or our data practices? Reach us at support@crownintel.co or visit crownintel.co.