What happens to your information.
Effective October 27, 2026.
What we collect
ContractConsult collects your account email and name or preferred name, your intake answers, uploaded contract files and supporting documents, and the reports we produce. Intake can include specialty, practice state or address, employer, call schedule, benefits, signing deadline and promo code.
We also keep review activity, report checklist choices, messages you send us and technical records used to run the service, such as job status, errors and model-processing records. Security checks use connection information such as IP addresses.
Please leave out patient information and unnecessary personal identifiers. Anything left in a document can be read during processing.
Why we use it
We use this information to run your account, produce and check your contract review, deliver your report, answer your questions and address problems with that review.
We keep a copy of the contract text you submit, with your name and contact details removed. That copy is stored under a random ID and is not linked to your account. We use it to improve our service. We never publish it in a form that identifies you, and we never use it to train AI models.
We do not sell your information.
Who can see it
Our physician reviewer and authorized administrators can access the material needed to review your report or resolve a problem. The founder reviews reports before release. The service providers below also process information to do their work.
Where it is processed
Our service uses a blend of AI tools and physician input. Contract text and the intake answers needed for your review are processed by these tools to prepare and check your report.
We have turned off model training on the AI services we use. Your contract is not used to train AI models.
We use trusted service providers for sign-in and secure storage, email, website hosting, maps and AI processing. They handle information only to provide those services to us. Loading the site also sends standard connection information, such as your IP address, to those providers.
Access and security
Your account data and uploaded files are stored with our storage provider in the United States. Files are encrypted at rest by our storage provider and sent over HTTPS. Account checks restrict access to reports.
These measures reduce risk, but no service can guarantee that information will never be lost or accessed without permission.
Keeping and deleting information
We keep your uploads and reports for as long as your account is open so you can always return to them.
Email [email protected] at any time to ask us to delete your uploads and reports. We will need to confirm the request is yours. Copies in backups expire on our normal backup cycle.
A deletion request removes your uploads and reports, but we cannot locate the anonymous bank copy because it is not linked to your account.
You can also email us to request a copy or correction of your information or to close your account.
Cookies and browser storage
Sign-in uses browser local storage to keep your session and remember where to return after signing in. The report stores your display preference and checklist state; checklist choices also sync to your account.
Clearing site storage can sign you out and remove local preferences. It does not delete uploaded files or your account.
Children
This service is for adult physicians, residents and fellows, not children. Do not submit a child's information. Contact us if you believe a child has provided information so we can review and address it.
Changes and questions
We will date updates to this policy and notify you before a material change takes effect. New uses of information will need to meet any applicable notice and consent requirements.
Privacy questions: [email protected].