Effective date: [DATE]
This Privacy Policy explains how [LEGAL ENTITY NAME] ("Make Corrections," "we," "us," or "our") collects, uses, and shares information in connection with the Make Corrections application and website (the "Service"). By using the Service, you agree to this Policy.
Account information. When you sign up, we collect your name, email address, and authentication identifiers. If you sign in with Google or Microsoft, we receive basic profile information from those providers. We do not store your password when you use a third-party sign-in.
Firm and project information. Information you provide about your firm, team members, projects, and recipients.
Uploaded content. Documents and files you upload — including submittals, specifications, and related project documents — and any markups, comments, or other content you create in the Service ("Customer Content").
Usage and device information. Logs about how you use the Service, such as actions taken, features used, approximate request volume, timestamps, and technical data like browser type and IP address, used for security, debugging, and improving the Service.
Payment information. If you subscribe to a paid plan, our payment processor ([Stripe]) collects and processes your payment details. We do not store full payment card numbers; we receive limited information such as billing status and the last four digits.
We use information to: provide, operate, secure, and maintain the Service; process your documents to generate review Output; authenticate users and manage accounts; process payments and enforce usage limits; communicate with you about the Service (including service and security notices); detect, prevent, and respond to fraud, abuse, and security incidents; comply with legal obligations; and improve and develop the Service.
A core function of the Service is automated analysis using artificial intelligence. To generate review Output, relevant portions of your uploaded documents and project information are transmitted to our AI provider ([Anthropic]) for processing. We rely on our AI provider's commitments regarding the handling of data submitted through its API. We do [not] use the content of your documents to train AI models, and our AI provider's API terms [state that API inputs and outputs are not used to train its models — confirm current terms]. You should not upload content you are not permitted to share with a cloud-based processor.
We do not sell your personal information. We share information only as follows:
- [Anthropic] — AI processing of submitted content - [Supabase] — database, file storage, and authentication hosting - [Vercel] — application hosting - [Stripe] — payment processing - [Resend] — transactional email - [Google / Microsoft] — optional sign-in (OAuth)
We retain Customer Content and account information for as long as your account is active and as needed to provide the Service. After account termination, we will make Customer Content available for export for [30] days, after which we may delete it, subject to our backup retention cycle and any legal obligations. We may retain certain logs and records as required for security, accounting, or legal purposes.
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, and isolation of customer data by firm. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for deciding whether the Service is appropriate for the sensitivity of the content you upload.
We use cookies and similar technologies (including browser local storage) for authentication, security, and remembering preferences. Disabling them may impair the Service. [If you add analytics or advertising technologies, disclose them here.]
The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
The Service is operated from the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S. and other countries where our subprocessors operate.
We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or in-app). The "Effective date" above reflects the latest version.
Questions or requests regarding this Policy or your information: [CONTACT EMAIL], [LEGAL ENTITY NAME AND ADDRESS].