Data handling

Terms Check processes submitted URLs, source text, questions, and optional context, requirements and jurisdiction to produce a report. Submitted contracts may be confidential: submit only what is needed, and remove personal data and credentials first. Reports are private to your secret request key and are not published at predictable URLs.

Processing and storage

The server retrieves public documents and sends extracted text and your question to the configured model API. Inputs, reports, payment receipt metadata and operational usage are stored in PostgreSQL. Result access uses a hash of your secret request key. Raw payment signatures and wallet private keys are not stored.

The browser keeps request keys and input in session storage for recovery. It does not load advertising or analytics. IP addresses are hashed for short-lived in-memory abuse counters on Vercel; they are not stored in the database.

Retention

Inputs and reports are retained for 30 days. After that they are never served, and the stored content is deleted during the next service activity (there is no always-on background job). Unresolved payment records are retained until reconciliation. A minimal payment and key-hash tombstone remains to prevent replay; it does not retain the question or document text. Blockchain transactions are public and cannot be removed by Terms Check.

Providers

Hosting uses Vercel, persistence uses the configured PostgreSQL host, and x402 payment verification and settlement use Coinbase Developer Platform. The default model adapter targets OpenAI with storage disabled in the API request; provider retention rules still apply. Alternative providers can be configured by the operator.