QuickLegalCheck ("we", "us", "our") is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at: info@quicklegalcheck.com
We collect and process the following categories of personal data:
| Category | Data | Purpose |
|---|---|---|
| Account information | Name, email address, password (hashed) | To create and manage your account |
| Contract data | Uploaded contract files and extracted text | To generate your contract review report |
| Report data | AI-generated review reports and PDF copies | To provide and deliver the Service |
| Payment information | Stripe customer ID, payment status | To process payments (card details are held by Stripe, not by us) |
| Marketing preferences | Mailing list consent status | To send marketing communications where consented |
| Usage data | Contract type, submission dates, report status | To improve the Service and for internal analytics |
We process your personal data on the following legal bases under the UK General Data Protection Regulation (UK GDPR):
Contract performance: Processing your account information, contract data, and payment information is necessary to provide the Service you have requested.
Consent: Where you have opted in to receive marketing communications, we process your email address and name for this purpose. You may withdraw your consent at any time.
Legitimate interests: We process usage data for internal analytics and service improvement, where this does not override your rights and freedoms.
When you upload a contract for review, the text content of the document is sent to Anthropic's Claude API for analysis. This is necessary to generate your review report.
Anthropic's data handling: Anthropic does not use data submitted via its API to train its AI models. API inputs and outputs may be retained by Anthropic for up to 30 days for safety monitoring and abuse prevention, after which they are deleted. Anthropic offers a zero data retention option, which we may enable. For more information, see Anthropic's Privacy Policy.
Your uploaded contract files and generated reports are stored securely on our servers (hosted by Supabase). We do not share your contract data with any other third parties beyond what is described in this policy.
We use the following third-party services to operate QuickLegalCheck:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication, database, and file storage | Account details, contract files, reports |
| Anthropic (Claude API) | AI-powered contract analysis | Contract text content only |
| Stripe | Payment processing | Email, payment card details (held by Stripe) |
| Vercel | Website hosting | Standard web request data |
| Microsoft 365 | Transactional email delivery | Email address, email content |
| MailerLite | Marketing emails (where consented) | Name and email address |
If you opt in during registration, we will send you occasional marketing emails about QuickLegalCheck updates, tips, and offers. These emails are managed through MailerLite.
You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email, or by contacting us. Unsubscribing from marketing emails will not affect transactional emails related to your account or reports.
We retain your account information and report data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (such as financial records, which we retain for 6 years).
Uploaded contract files are retained for the duration of your account to allow you to access your reports. You may request deletion of specific contracts at any time.
We take appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/SSL), secure authentication, and access controls. Payment card details are processed and stored by Stripe — we never see or store your full card number.
Under the UK GDPR, you have the following rights in relation to your personal data:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may ask us to correct any inaccurate data we hold about you.
Right to erasure: You may ask us to delete your personal data, subject to any legal obligations we have to retain it.
Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
Right to data portability: You may request a machine-readable copy of the data you have provided to us.
Right to withdraw consent: Where processing is based on consent (such as marketing emails), you may withdraw your consent at any time.
Right to complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been breached.
To exercise any of these rights, please contact us at info@quicklegalcheck.com. We will respond within one month.
We use essential cookies to maintain your login session and ensure the Service functions correctly. These are strictly necessary and do not require consent.
We do not currently use analytics cookies, advertising cookies, or any third-party tracking cookies on the Service.
Some of our third-party service providers (including Anthropic, Stripe, Vercel, and Supabase) may process data outside of the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your personal data in accordance with UK data protection law.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: info@quicklegalcheck.com