Privacy Policy
Effective October 25, 2026
This policy explains what ContractPlan Inc. collects through ContractPlan, why, and what you can do about it. It applies to people who use ContractPlan for their organization and to people who open a share link.
What we collect
- Account information: name, email address and the organizations you belong to, through our sign-in provider.
- Contract information you enter or confirm: contracts, amounts, rates, services, invoices, aggregate service and census counts, deadlines, notes and planner assumptions.
- Files you attach as proof of a submission.
- Billing information: plan and payment status. Card details go directly to Stripe; we never see or store card numbers.
- Technical information: IP address, browser type and request logs, used for security and to fix problems. We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies.
- Site usage: anonymous page-view counts (which pages are visited, the referring site, country and device type) through Vercel Web Analytics. It uses no cookies and does not identify you, and share-link addresses are recorded without their code.
What ContractPlan is not built to hold
ContractPlan works with aggregate counts. It does not ask for, and our Terms prohibit uploading, names, identification numbers, health information or other personal information about the people your programs serve.
How documents are read
- Email sent to your organization's intake address is received by Resend and read the same way as an upload. ContractPlan keeps the sender, subject, date and what was read from it; attachments are not kept, except a contract or amendment, which is kept privately on the contract record.
- When you upload a contract, amendment or invoice to be read, the file is sent to Anthropic's Claude model to extract its terms. Invoices are deleted after reading. A contract or amendment is kept only when you choose “Keep a copy”; it is then stored privately on the contract record until you or the retention schedule removes it.
- Anthropic's commercial terms state that it may not train its models on customer content.
- Files you attach as proof of submission are kept in private storage. Only signed-in members of your organization can open them, and funders can open them only through a share link where you have marked that file visible.
How we use information
- To provide ContractPlan: store and calculate your contract data, show it to your organization, and send the weekly email.
- To bill your organization and send service messages (for example, trial and payment notices).
- To keep the service secure, investigate problems and respond to support requests.
We do not sell personal information, share it for advertising, or use your organization's data to build products for anyone else.
Who we share it with
We share information only with the service providers below, who process it on our behalf to run ContractPlan; with people you choose to give a share link; and where the law requires it.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting the application; storing files attached as proof of submission | United States |
| Neon | Database | United States |
| Clerk | Sign-in, user accounts and organization membership | United States |
| Stripe | Subscriptions and payments | United States |
| Anthropic | Reading uploaded contracts, amendments and invoices | United States |
| Resend | Sending the weekly email; receiving email sent to your intake address | United States |
| Sentry | Error reports (technical details of failures, without personal information) | United States |
Security
- All traffic is encrypted with HTTPS. Data and files are encrypted at rest by our providers.
- Each organization's data is kept separate by rules enforced in the database itself, so one organization cannot read another's records.
- Share links are long random codes; we store only a scrambled version. Links can expire and can be turned off at any time.
- Changes to contracts and actuals are recorded in an audit log that cannot be edited.
How long we keep it
We keep your organization's data while its subscription is active. After the subscription ends we keep it for 30 days so you can return or export it, then delete it. Backups are deleted as they expire. Billing records are kept as long as tax law requires.
Your choices
- Turn the weekly email off on the Weekly email page or with the link in any weekly email.
- Ask for a copy of your data, a correction, or deletion of your account by writing to hello@contractplan.com. We respond within 30 days.
Children
ContractPlan is a business tool and is not intended for anyone under 18.
Changes to this policy
If we make a material change, we will email organization administrators at least 30 days before it takes effect.
Contact
ContractPlan Inc. · hello@contractplan.com