Privacy Policy

Last updated: 29 October 2026

ScanTract ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

• Account details: Information you provide, which may include your name and email address.
• Documents: Contracts and files uploaded by you. These remain your property.
• Usage Data: Device information, IP address, and activity logs.

2. How We Use Your Information

• To provide and improve our AI contract review services.
• To personalize your experience and deliver relevant features.
• To manage accounts, support requests and services you choose to use.
• To comply with legal and regulatory obligations.

Email subscriptions, consent and Klaviyo

When you subscribe for ScanTract newsletters, beta invitations, Kickstarter announcements or individual consumer campaign updates, we collect your email address, the signup form and interests you choose, and the date and wording of your consent. We may also record the campaign source and UTM attribution parameters associated with your visit.

We use Klaviyo as our email marketing provider to maintain subscriptions, organise audiences by interest and send relevant messages. Your subscription information is transferred to and processed by Klaviyo, which may process it outside Australia. You can unsubscribe using the link in any marketing email or contact hello@scantract.co about your email preferences.

Our forms request explicit email marketing consent. Joining an interest list does not promise beta access, guarantee a Kickstarter reward or require you to provide documents related to a consumer dispute. When you access our campaign guides, you do not need to subscribe.

3. Document Processing, Storage & Security

ScanTract's document tools may process text locally in your browser or submit documents and extracted text to our servers and third-party processing services. Depending on the feature, processing may involve cloud infrastructure including Amazon Web Services (S3 and Textract), Supabase and AI services.

Some document-processing paths create temporary cloud storage objects. Other features may save source documents, extracted text or analysis records with a contract event. Retention varies by workflow and account state. We do not currently guarantee that every document is automatically deleted after 30 days, or that files are never retained.

We use service-provider and platform security controls to protect information. Please avoid uploading information you do not have permission to process. For questions about document retention or deletion, contacthello@scantract.co. We are reviewing and improving our deletion and retention controls.

4. Sharing Your Information

• We do not sell or rent your information to third parties.
• We may share data with trusted service providers (e.g., cloud hosting, payment processors) bound by confidentiality agreements.
• Disclosure may occur if required by law, regulation, or legal process.

5. Your Rights

• Request access to your data.
• Request deletion of your account and files.
• Opt-out of optional communications.

6. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted with a new effective date.

7. Contact

If you have questions, contact us at: hello@scantract.co.