Privacy Policy
RateMyContract
Last updated: July 3, 2026
RateMyContract (“we,” “us,” “our,” or “the Service”) is operated by Codeatic. This Privacy Policy explains what information we collect, how we handle documents you upload, and how personal information is treated when you use RateMyContract.
By using RateMyContract, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
1. What This Service Does
RateMyContract allows you to upload or paste a contract and receive an AI-generated, plain-English breakdown of the document, including potential risks, favorable terms, and missing clauses. RateMyContract is not a law firm and does not provide legal advice. See our Terms of Use for full details on this limitation.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Your email address
- Your password (stored in encrypted/hashed form — we never store or view your plain-text password)
- If you sign in with Google, basic profile information provided by Google (name, email)
2.2 Contract Documents and Text
When you upload a file or paste text for analysis, that content is processed to generate your report. We do not store your contract document or pasted text after your analysis is complete. See Section 4 for full detail on how this works.
2.3 Form Inputs
We collect the information you provide in the analysis form, such as your selected role (e.g. employee, tenant), contract type, and a short description of your situation. This information is used only to generate a more relevant analysis and is not retained after your session unless you are a logged-in user viewing report history (if and when that feature is enabled).
2.4 Automatically Collected Information
Like most websites, we automatically collect limited technical information, such as:
- IP address (used for rate-limiting and abuse prevention only)
- Browser type and device information
- General usage analytics (e.g. pages visited, session duration)
We do not use this information to identify you personally beyond preventing abuse of the free tier.
3. Personal Information Inside Your Contract (PII Redaction)
Contracts often contain personal information belonging to you and/or another party — names, addresses, phone numbers, email addresses, ID/CNIC numbers, bank account details, and similar data.
Before your document is sent to our AI provider for analysis, we run it through an automated redaction process that detects and removes common categories of personal information, including:
- Names appearing in labeled sections of a contract (e.g. next to “Tenant:,” “Employer:,” “Between:,” signature blocks)
- Email addresses
- Phone numbers
- Bank account numbers and IBANs
- Government ID numbers (e.g. CNIC, passport, SSN, and similar identifiers) where a recognizable label appears nearby
- Dates and other structured identifiers
This redaction happens automatically and does not require any action from you.
Important and honest limitation: This process is designed to catch the vast majority of personal information typically found in contracts, particularly information found in signature blocks, party definitions, and labeled fields. However, no automated redaction system can guarantee the detection of every instance of personal information in every document — for example, a name mentioned casually within a sentence, without a nearby label, may not always be detected. We continue to improve this system over time.
If your document contains especially sensitive information you would prefer not to risk exposing, we recommend manually removing or blacking it out before uploading.
4. How Your Document Is Processed
- When you upload or paste a contract, the text is extracted and held in memory only, for the duration of your request.
- Personal information is automatically redacted as described in Section 3.
- The redacted text is sent to our AI provider to generate your analysis.
- The AI-generated report is returned to you and displayed in your browser.
- At no point is your original document or its extracted text written to a database or permanent storage. Once your report has been generated and delivered, the document text is discarded from memory.
We do not keep a copy of your contract. We do not use your contract content to train any AI model.
5. Sharing of Information
We do not sell your personal information.
We share limited information with the following categories of third parties, solely to operate the Service:
| Party | What is shared | Purpose |
|---|---|---|
| AI analysis provider | Redacted contract text (personal information removed as described in Section 3) | To generate your contract analysis |
| Authentication provider (e.g. Supabase/Google) | Email address, login credentials | To manage your account and login |
| Hosting/infrastructure provider | Technical data (IP address, request logs) | To run and secure the Service |
We may also disclose information if required by law, to protect our legal rights, or to prevent fraud or abuse of the Service.
6. Data Retention
| Data type | Retention |
|---|---|
| Contract document/text | Not retained — discarded from memory after report generation |
| Account email address | Retained while your account is active |
| Password | Retained (encrypted) while your account is active |
| Marketing opt-in preference | Retained until you withdraw consent |
| Technical/IP logs (rate limiting) | Retained for a limited period for abuse prevention, then deleted |
You may request deletion of your account and associated data at any time (see Section 8).
7. Cookies and Similar Technologies
We use local session tokens to keep you logged in and to maintain your session while using the Service. We do not use third-party advertising cookies.
8. Your Rights and Choices
Depending on your location, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your account and associated data
- Withdraw marketing consent at any time
- Object to certain processing of your information
To exercise any of these rights, contact us using the details in Section 12.
9. Security
We use reasonable technical and organizational measures to protect your information, including encrypted password storage and in-memory-only document processing. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.
11. Contact Us
If you have questions about this Privacy Policy or how your information is handled, contact us at:
Codeatic
Website: codeatic.com
This Privacy Policy is provided for general informational purposes and should be reviewed by a qualified attorney before publication, to ensure compliance with applicable laws in the jurisdictions where RateMyContract operates (e.g. GDPR, CCPA, or local data protection laws).