Privacy Policy
Last updated: April 15, 2026
At SignWise ("we," "our," or "us"), your privacy is fundamental to how we build and operate our platform. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using SignWise at signwise.in, you agree to the practices described here.
1. Information We Collect
a) Account Information
When you sign up, we collect your name, email address, and authentication credentials. If you register via Google OAuth, we receive your name and email from Google — we do not access your Google contacts, calendar, or other data.
b) Profile Preferences
During onboarding, you may provide your persona type (e.g., freelancer, business owner) and jurisdiction. These help us tailor contract analysis to your context.
c) Uploaded Contracts
When you upload a contract (PDF, DOCX, or pasted text), the document content is stored in your account for analysis. We extract text from uploaded files server-side and discard the original file after processing.
d) Usage Data
We collect basic analytics: pages visited, features used, analysis counts, and subscription status. We do not use third-party tracking scripts or advertising cookies.
e) Payment Information
Payment processing is handled entirely by Razorpay. We receive your subscription ID and payment status but never see or store your card number, CVV, or banking details.
2. How We Use Your Information
- Contract Analysis: Your uploaded documents are sent to our AI (powered by Anthropic Claude) for clause extraction, risk scoring, and generating suggestions. The AI processes your text in real-time and does not retain your documents after analysis.
- Account Management: Your email and profile data are used to manage your account, subscriptions, and communicate important updates.
- Service Improvement: Aggregated, anonymized usage patterns help us improve features and performance. We never use your actual contract content for training or improvement purposes.
- Communication: We may send transactional emails (welcome, password reset, subscription updates). We do not send marketing emails without your consent.
3. AI Processing & Your Documents
This is important — here's exactly what happens to your contracts:
- Your contract text is sent to Anthropic's Claude API for analysis. Anthropic's API does not use your data to train their models (per their API terms).
- Analysis results (clauses, risk scores, summaries) are stored in your account so you can access them later.
- We do not share your contract content with any other third parties.
- You can delete any contract and its analysis from your dashboard at any time. Deletion is permanent.
4. Data Storage & Security
- All data is stored on Supabase (built on PostgreSQL) with row-level security (RLS) enabled — you can only access your own data.
- Data is encrypted in transit (TLS/HTTPS) and at rest.
- Authentication is handled via Supabase Auth with secure session tokens.
- We follow industry-standard security practices, including parameterized queries, input validation, and rate limiting.
5. Data Sharing
We do not sell your data. We share information only with:
- Anthropic (Claude API): Contract text is sent for AI analysis. Anthropic does not retain or train on API data.
- Razorpay: Payment processing only. They receive your email and subscription details.
- Supabase: Database and authentication hosting.
- Vercel: Application hosting. No user data is stored on Vercel beyond standard web server logs.
We may disclose data if required by law or to protect the rights, safety, or property of SignWise or its users.
6. Cookies
We use only essential cookies for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Your theme preference (light/dark mode) is stored locally in your browser.
7. Your Rights
You have the right to:
- Access your personal data stored in your account.
- Update your profile information from the Settings page.
- Delete individual contracts and their analysis results.
- Delete your account entirely by contacting support@signwise.in. We will permanently erase all your data within 30 days.
- Export your data by requesting it via email.
- Withdraw consent for non-essential communications at any time.
8. Data Retention
- Active accounts: Data is retained as long as your account is active.
- Deleted contracts: Permanently removed immediately upon deletion.
- Closed accounts: All data is permanently deleted within 30 days of account closure.
- Free plan inactivity: Accounts inactive for over 12 months may be flagged for deletion. We will notify you via email before taking action.
9. Children's Privacy
SignWise is not intended for users under 18 years of age. We do not knowingly collect data from minors. If we learn that a minor has created an account, we will promptly delete it and all associated data.
10. International Users
SignWise is operated from India. If you access the Service from outside India, your data may be transferred to and processed in India. By using SignWise, you consent to this transfer. We comply with applicable Indian data protection regulations, including the Digital Personal Data Protection Act (DPDPA).
11. Changes to This Policy
We may update this Privacy Policy as our Service evolves. Material changes will be communicated via email or an in-app notice. Continued use of SignWise after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, data requests, or concerns, contact us at support@signwise.in.
