Privacy Policy

1. Introduction

SoundDeal ("we," "us," or "our") operates the SoundDeal platform. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

Account Information: When you create an account, we collect your email address and password (stored in hashed form).

Payment Information: When you purchase a plan, payment is processed by Stripe. We do not store your credit card number, expiration date, or CVC.

Uploaded Contracts: When you submit a contract for analysis, the document text is processed by our AI analysis engine. We do not permanently store the full text of your uploaded contracts after analysis is complete.

Analysis Results: Your analysis reports (deal health scores, red flags, benchmarks) are stored in our database so you can access your analysis history.

Usage Data: We collect basic usage data including pages visited, features used, analysis count, and timestamps.

Cookies: We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

3. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Process your contract analyses
• Manage your account and subscription
• Process payments through Stripe
• Send transactional emails (receipts, account notifications)
• Improve the Service
• Comply with legal obligations

We do NOT use your information to:

• Sell or rent your personal data to third parties
• Send marketing emails without your consent
• Train AI models on your uploaded contracts
• Share your contract content with other users

4. Third-Party Services

We use the following third-party services:

• Stripe — Payment processing.
• Anthropic Claude API — AI-powered contract analysis. Anthropic's API usage policy states that data sent via the API is not used to train their models.
• Neon / Postgres — Database hosting.
• Vercel — Application hosting.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure API key management. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

• Account data: Retained while your account is active, deleted within 30 days of account deletion request.
• Analysis results: Retained while your account is active. You may request deletion at any time.
• Uploaded contract text: Processed in memory during analysis and not permanently stored in its original form.
• Payment records: Retained as required by tax and financial regulations.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your analysis history
• Opt out of non-essential communications

To exercise any of these rights, contact us at support@sound-deal.com.

California Residents (CCPA): You have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from minors.

9. International Users

The Service is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service.

11. Contact

Privacy questions? Contact us at support@sound-deal.com.