Privacy Policy

Last updated: September 26, 2026

Ariizona LLC, a Wyoming limited liability company ("ContractBridge," "we," "us"), operates the ContractBridge contract analysis platform at contractbridge.io and app.contractbridge.io. This policy explains what information we collect, why, how long we keep it, and who can see it.

1. Who we are

ContractBridge is operated by Ariizona LLC, a Wyoming limited liability company. For any question about this policy or your data, contact us at support@contractbridge.io.

2. Information we collect

Account information. When you sign up, we collect your email address, a hashed version of your password (we never store your actual password), and optionally an organization name.

Your contracts and documents. The core of the service is analyzing vendor contracts you upload. We store the files you upload, text extracted from them, and the output generated from them: summaries, extracted terms, conflict flags, incentive/rebate tracking data, and any questions you ask about your documents along with the answers.

Technical and usage data. We log IP addresses briefly for rate limiting and abuse prevention, and we use automated error monitoring that captures technical error reports when something breaks, so we can fix it.

Cookies. We use exactly one cookie: a secure, HttpOnly session cookie that keeps you signed in. It cannot be read by JavaScript and is not used for advertising, tracking, or analytics. We do not use third-party ad or tracking cookies.

3. Why we collect and use it

We collect and use your information because it's necessary to provide the service you signed up for, to keep your account and ContractBridge itself secure, and, where you've opted in, to communicate with you about the product.

4. How we use your data

To provide the service: storing your documents, analyzing them, and showing you results.
To operate your account: authentication, password resets, and support.
To keep the service secure and reliable: rate limiting, error monitoring, and fraud/abuse prevention.
To send you transactional emails you'd expect, like password reset links. We do not send marketing email unless you separately opt in, and we do not sell or rent your information to anyone.

5. Cookies

ContractBridge uses one cookie: a secure, HttpOnly session cookie required to keep you signed in. It is strictly necessary for the service to work and cannot be disabled while staying signed in. We do not use analytics, advertising, or third-party tracking cookies.

6. Sharing your information

Your documents and account data are scoped to your account. Other ContractBridge users cannot see your contracts. We use a small number of service providers to run ContractBridge — for things like hosting our database and application, processing documents to generate results, delivering transactional email, and monitoring for technical errors. Each of these providers processes data on our behalf under their own security and privacy commitments, and none of them are permitted to use your data for their own purposes. We do not sell or trade your personal data to third parties for marketing purposes, and we do not share your documents with anyone outside ContractBridge except as described here or as required by law.

7. Data retention

Account and document data is kept for as long as your account is active. If you delete a document or your account, we remove it from our active database; it may persist briefly in backups afterward (see below).
Backups are retained on a 7-day rolling window, so we can recover from a technical failure. This is for disaster recovery, not routine access.
Password reset links expire after 1 hour and can only be used once.
Sessions use a short-lived sign-in token (30 minutes) backed by a longer-lived session that can be revoked at any time by signing out, and expires automatically after 30 days of inactivity.

8. Your rights and choices

You can access, export, or delete your documents from within the app. You can request deletion of your entire account and associated data by emailing support@contractbridge.io. We are an early-stage company and do not yet hold formal certifications (such as SOC 2, GDPR, or CCPA compliance programs); if you have specific regulatory requirements, contact us before relying on ContractBridge for regulated data.

9. Limitation of liability

ContractBridge's extracted terms, conflict flags, and answers are generated automatically and may contain errors. You are responsible for independently verifying any output before relying on it for a business or legal decision.

10. Security

We take a number of concrete steps to protect your data — passwords are hashed, not stored in plaintext; all traffic is encrypted in transit; access to the API is rate limited and restricted by origin. See our Security Statement for details.

11. Children's privacy

ContractBridge is a business tool and is not directed at, or intended for use by, anyone under 18.

12. Changes to this policy

We may update this policy as ContractBridge evolves. We'll update the "Last updated" date above when we do. Material changes will be communicated by email or an in-app notice.

13. Contact us

Questions about this policy or your data: support@contractbridge.io.