LEGAL

Privacy Policy

Last updated: April 2026·Effective: April 2026

DAT (“we”, “us”, “our”) is built for procurement and legal professionals who handle sensitive contracts. We take data privacy seriously. This policy explains what we collect, why we collect it, and how you can control it. If something is unclear, email us at privacy@synorus.com.

1. Information We Collect

We collect information you provide directly: account details (name, email), documents you upload for analysis, and payment information processed securely via Razorpay.

We automatically collect usage data including pages visited, features used, analysis counts, and device/browser information to improve the product.

We do not store the full text of your contracts beyond the period required to complete analysis. Extracted findings and reports are retained in your account until you delete them.

2. How We Use Your Information

To provide, operate, and improve the DAT service — including running AI analysis on uploaded documents.

To manage your account, process payments, send transactional emails, and respond to support requests.

To understand how the product is used and improve its accuracy and features. We may train or fine-tune AI models on anonymised, aggregated finding patterns — never on raw contract text.

We do not sell your data to third parties. We do not use your contract content for advertising.

3. Document and Contract Data

Documents you upload are stored encrypted at rest in Cloudflare R2 (US/EU region). They are used solely to produce the analysis you requested.

Raw document files are automatically deleted 30 days after upload unless you explicitly retain them in your Drive. Extracted findings and reports remain until you delete them.

Your documents are never shared with other organisations or used to train shared models without explicit opt-in.

4. AI Processing

DAT uses third-party AI providers to process document content. These providers act as data processors under our terms and are contractually prohibited from using your data for their own model training.

We are AI-agnostic by design — we may change AI providers to improve quality or reduce cost. All providers are subject to the same data handling requirements.

AI analysis results may contain errors. DAT findings are provided for informational purposes and do not constitute legal advice.

5. Data Sharing

We share data only with service providers necessary to operate DAT: cloud hosting (Cloudflare, Vercel), authentication (WorkOS), payments (Razorpay), and AI processing.

We may disclose information if required by law, court order, or to protect the rights and safety of DAT and its users.

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity under the same privacy terms.

6. Data Retention

Account data is retained for as long as your account is active. You may request deletion at any time by emailing privacy@synorus.com.

Raw uploaded documents: 30 days after upload (or until manually deleted).

Analysis reports and findings: retained until you delete them from your account.

Payment records: retained for 7 years as required by financial regulations.

7. Security

We use industry-standard security measures: TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews.

Despite these measures, no system is 100% secure. We will notify affected users promptly in the event of a breach.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. Log in to your account settings or contact privacy@synorus.com.

You may request a copy of your data in portable format (JSON or CSV).

You may opt out of non-essential communications at any time via the unsubscribe link in any email.

Residents of the EU/UK have additional rights under GDPR/UK GDPR including the right to restrict processing and lodge a complaint with your local supervisory authority.

9. Cookies

We use essential cookies required for authentication and session management. We do not use third-party tracking or advertising cookies.

You may disable cookies in your browser settings; this may affect some features of the service.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before taking effect.

Your continued use of DAT after a policy change constitutes acceptance of the updated terms.

11. Contact

Questions about this policy or your data? Email us at privacy@synorus.com.

DAT is operated by Synorus Technologies. Registered address available on request.

We are committed to keeping this policy clear and up to date. If you have any concerns about your data, please reach out to privacy@synorus.com — we aim to respond within 48 hours.