Privacy Policy

Last updated: September 29, 2026

Pactlyst exists to help you understand agreements — not to trade on your information. This policy explains what we collect, why, and how you stay in control.

Information we collect

  • Waitlist email: when you join the waitlist, we collect the email address you provide so we can notify you about early access.
  • Signup attribution: when you join the waitlist, we also record basic campaign and referrer details (such as utm_source, utm_medium, utm_campaign, fbclid, and the referring page) alongside your email so we can measure which ads and links bring people in — this is sent by our own code, not a third-party tracker.
  • Website visits: this marketing site does not run its own analytics or tracking scripts.
  • Account information: when you create a Pactlyst account, we store your email address and account ID so you can sign in and sync across devices.
  • Documents you scan: photos or PDFs you choose to upload for review. Your file is held briefly on our server while it is sent to our AI provider for analysis (see "How your documents are processed" below), then deleted.
  • Your reviews: the analysis results we generate for you (verdict, fairness score, red flags, key terms, risks, benefits, lawyer guidance) are saved on your iPhone so you can re-open past reviews.
  • Ask chat history: your questions and the AI's answers, so the Ask chat works across your devices.
  • Agreements you watch: deadlines and key dates you ask to be reminded about, plus usage counters that enforce monthly plan limits fairly.
  • App settings on your device: your home state, explanation language, AI model choice, PIN (stored as a salted hash, never the PIN itself), and biometric unlock preference. Your home state and explanation language are included in the request sent to our AI provider with each analysis so explanations fit your situation.
  • Crash reports: anonymous crash and error reports that help us fix bugs. They never include your identity, and file paths and document-like filenames are scrubbed on your device before anything is sent.
  • Payment information: purchases are processed by Apple — we never see or store your card details. We receive only your subscription status from our subscription provider.

How we use your information

  • To send waitlist updates and your early-access invitation.
  • To respond if you contact us.
  • To operate and improve Pactlyst.

We do not sell your personal information. We do not share it with advertisers or data brokers.

How your documents are processed

When you scan a document, the app uploads it to a private, temporary holding area on our server. Our server sends the document to OpenAI — our AI provider — to generate your review. This is what happens to your document at each step:

  • Temporary upload: Uploaded documents are deleted from our server right after they're downloaded for analysis (retried up to 3 times), and every scan also clears away any of your uploads left behind for more than 2 hours. A scheduled bucket-wide sweep runs every 6 hours to delete any stranded files.
  • AI analysis: OpenAI reads your document to produce the review. PDFs are uploaded through OpenAI's file service and deleted immediately after the analysis. Photos are sent as part of the request and never stored as a file. OpenAI does not use your data to train its models. We have executed OpenAI's Data Processing Addendum (signed September 27, 2026), which contractually commits them to process your data only on our instructions.
  • OpenAI's own logs: OpenAI may keep abuse-monitoring logs (which can include document content) for up to 30 days under its default terms, then deletes them. We have not enabled OpenAI's Zero Data Retention option, which would remove even that logging — we will update this page if our arrangement changes.
  • Your review stays on your phone: the analysis result is saved only on your iPhone, never on our servers.

How long we keep your information

  • Scanned uploads: deleted right after they're downloaded for analysis (retried up to 3 times).
  • Saved reviews: kept on your iPhone until you delete them. A full on-device wipe on account deletion is implemented and in testing for the next app update — until then, deleting your account does not remove saved reviews from your phone (see "What deleting your account does" below).
  • Ask chat history: kept until you delete your account.
  • Usage counters: reset every calendar month; one-time review credits you purchased never expire.
  • Watched agreements: kept until you stop watching them. Internal sync records that note deletions expire automatically after 30 days.
  • Account information: kept until you delete your account.
  • Crash reports: kept according to our crash-reporting provider's retention policy.
  • Waitlist emails: kept until you unsubscribe.

What deleting your account does

You can delete your account at any time in the app (Settings → Danger Zone → Delete account). Deleting your account:

  • Permanently removes your sign-in, Ask chat history, watched agreements, and usage records from our live systems, immediately.
  • Removes any of your files still in the temporary upload area.
  • On your iPhone, deleting your account signs you out. A full wipe of the device — saved reviews and documents (including cached photo files), score history, PIN and PIN-lockout data, biometric unlock preference, sign-in details, settings (home state and explanation language), your own OpenAI API key if you set one, terms acceptance, and review-prompt state — is implemented and in testing for the next app update; it is not in the current app version yet, so your saved reviews stay on your phone after account deletion until you delete them yourself. (Signing out alone never deletes your saved reviews; the app tells you this when you sign out.)

Our database runs on a service tier that performs no automated backups, so deleted data is not kept in any backup copy — once it is deleted, it is gone, and we cannot restore it. Uploaded files are never included in backups at all, so deleting a file deletes it permanently. Signing out (without deleting your account) keeps your saved reviews on your iPhone — the app tells you this when you sign out — so a routine sign-out never destroys your documents.

Service providers

We use a small number of service providers to run Pactlyst. They process information only on our instructions and only as needed to provide their service:

See our Security page for how we protect your information and the results of our pre-launch security review.

Cookies

This site does not set first-party tracking cookies and shows no cookie banner for that reason. Embedded third parties (such as the font provider) may set their own cookies subject to their policies.

Security

We protect information with measures appropriate to what we hold — including encrypted connections (HTTPS), per-account access controls on all app data, and secrets that exist only on our servers, never inside the app. See our Security page for the full, honest picture, including the results of our pre-launch security review.

Your rights & data deletion

You control your information. You can:

  • Delete your account and all your data: in the app, go to Settings → Danger Zone → Delete account. This permanently removes your cloud data (sign-in, Ask chat history, watched agreements, usage records) from our live systems immediately, and removes any of your files still in the temporary upload area. It does not yet wipe your iPhone — your saved reviews stay on your phone until you delete them yourself; a full on-device wipe is implemented and in testing for the next app update. (See "What deleting your account does" above for the full detail.)
  • Delete your data by email: email [email protected] with the subject "Delete my data" from the address you signed up with. We will delete your waitlist entry and confirm within 30 days.
  • Unsubscribe: you can unsubscribe at any time — reply to any waitlist email or write to [email protected]. Our waitlist is managed through Brevo (brevo.com). We use single opt-in — when you sign up you join the waitlist right away and will receive a welcome email. Every automated message carries an unsubscribe link.
  • Ask for a copy: email us and we will send you the information we hold about you.

Children

Pactlyst is not directed at children under 13, and we do not knowingly collect their information.

Changes to this policy

We will update this page when our practices change and note the new effective date above. If a change meaningfully affects your rights, we will highlight it here.

Contact

Questions about privacy? Email [email protected].