Privacy Policy for Resplain

Introduction

Paxbytes LLC ("we," "our," or "us") operates Resplain, an AI-powered contract analysis platform. This Privacy Policy explains how we collect, use, protect, and share your information when you use our service at resplain.ai (the "Service").

Information We Collect

Information You Provide Directly

• • Account Information: Email address, password (encrypted), company name
• • Profile Information: Name, job title, billing information
• • Documents: Contracts and legal documents you upload for analysis
• • Communications: Messages sent through our support channels or Max Contract AI assistant

Information We Collect Automatically

• • Usage Data: How you interact with our platform, features used, time spent
• • Technical Data: IP address, browser type, device information, operating system
• • Session Data: Login times, page views, clicks within the application
• • Performance Data: Error logs, response times, system performance metrics

Information from Third Parties

• • Payment Processors: Stripe provides billing and subscription status information
• • Authentication Services: If you sign up using third-party authentication

How We Use Your Information

Core Service Operations

• • Document Analysis: Process your contracts using AI to provide plain English translations, risk assessments, and action items
• • Account Management: Create and maintain your user account and subscription
• • Customer Support: Respond to your questions and troubleshoot issues
• • Service Improvement: Analyze usage patterns to enhance platform functionality

AI Processing

• • OpenAI and Anthropic Integration: Your contract text is sent to OpenAI and Anthropic AI services for analysis
• • No Training Data: We do not use your documents to train AI models or improve third-party AI services
• • Processing Only: AI services process your content solely to provide you with analysis results

Communications

• • Service Updates: Important announcements about your account or the platform
• • Support Communications: Responses to your inquiries and technical assistance
• • Marketing Communications: Product updates and feature announcements (you can opt out)

How We Share Your Information

Limited Sharing for Service Operations

• • AI Processing: Contract content is processed by OpenAI and Anthropic services for analysis
• • Payment Processing: Billing information is processed by Stripe for subscription management
• • Cloud Infrastructure: Data is stored on AWS servers with enterprise-grade security
• • Legal Requirements: We may disclose information if required by law or to protect our legal rights

Service Providers

We work with trusted third parties who help us operate the platform:

• • Amazon Web Services (AWS): Cloud hosting and database services
• • OpenAI: AI analysis services for contract processing
• • Anthropic: AI analysis services for contract processing
• • Stripe: Payment processing and subscription management
• • Email Services: Transactional emails and customer communications

All service providers are bound by confidentiality agreements and data processing terms.

Data Security

How We Protect Your Information

• • Encryption in Transit: All data transfers use HTTPS/TLS encryption
• • Encryption at Rest: Documents and data are encrypted when stored in our databases
• • Access Controls: Limited employee access to personal data on a need-to-know basis
• • Infrastructure Security: AWS enterprise-grade security controls and monitoring
• • Regular Backups: Secure, encrypted backups of your data

Document Security

• • Temporary Processing: Documents are processed and cached temporarily for analysis
• • Secure Storage: Document storage uses AES-256 encryption in AWS S3
• • Data Retention: Documents are retained until you delete them from your account
• • Soft Deletion: Deleted documents are marked for removal and permanently deleted from our systems within 30 days
• • No Unauthorized Access: We never access your documents except for technical support when you specifically request it

Data Retention

How Long We Keep Your Information

• • Account Data: Retained while your account is active and for up to 30 days after deletion
• • Documents: Retained until you delete them from your account, then permanently deleted within 30 days
• • Usage Data: Aggregated usage analytics retained for up to 2 years
• • Financial Records: Billing information retained according to Stripe's data retention policies

Data Deletion

• • Account Deletion: You can delete your account and all associated data at any time
• • Document Deletion: You can delete individual documents or set automatic deletion rules
• • Right to Erasure: We will delete your personal information upon request (subject to legal retention requirements)

Your Rights and Choices

Access and Control

• • Account Dashboard: View and update your personal information anytime
• • Document Management: Upload, view, organize, and delete your documents
• • Communication Preferences: Opt out of marketing communications

Privacy Rights

• • Access: Request a copy of the personal information we have about you
• • Correction: Update or correct inaccurate personal information
• • Deletion: Request deletion of your personal information and account

To exercise these rights, contact us at privacy@resplain.ai

Cookies and Tracking

How We Use Cookies

• • Essential Cookies: Required for login, security, and basic platform functionality
• • Performance Cookies: Help us understand how you use the platform to improve performance
• • Session Management: Maintain your login state and preferences during your session

Third-Party Analytics

• • We may use analytics services to understand platform usage and improve our service
• • You can opt out of analytics tracking through your browser settings or by contacting us

International Data Transfers

Our service is operated from the United States. If you are accessing the service from outside the US, your information will be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction.

We ensure appropriate safeguards are in place for international data transfers, including:

• • AWS Global Infrastructure: Enterprise-grade security controls across regions
• • Data Processing Agreements: Contracts with service providers that include privacy protections

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• • Notification: We'll notify you via email or platform announcement
• • Effective Date: Changes become effective 30 days after notification
• • Continued Use: Your continued use of the service after changes indicates acceptance

State-Specific Privacy Rights

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• • Right to Know: Categories and specific pieces of personal information we collect
• • Right to Delete: Request deletion of your personal information
• • Right to Opt-Out: Opt out of the sale of personal information (we don't sell data)
• • Right to Non-Discrimination: We won't discriminate against you for exercising your rights

Business Transfers

If Paxbytes LLC is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Contact Information

Questions or Concerns

If you have questions about this Privacy Policy or our data practices, contact us:

Response Time

We will respond to privacy inquiries within 30 days of receipt.