Privacy Policy

How we collect, use, and protect your information

Effective Date: May 2026 · Last Updated: May 2026

Plain English summary: You upload contract text for AI-powered analysis. That text is sent to Anthropic's API for processing and automatically deleted within 24 hours. We may use anonymised, de-identified data to improve our service and for research. We do not currently sell your personal data. We do not provide legal advice.

Contents
  1. Who We Are
  2. Information We Collect
  3. How We Use Your Information
  4. Anonymised Data and Research
  5. License to Your Content
  6. Third-Party Services and AI Processing
  7. Data Retention and Deletion
  8. Cookies
  9. Data Security
  10. Your Rights
  11. California Residents — CCPA/CPRA
  12. Washington State Residents
  13. Children's Privacy
  14. Not Legal Advice
  15. Changes to This Policy

1. Who We Are

Lexplayn LLC ("Lexplayn," "we," "us," or "our") operates Contract Decoder and the website at contractdecoder.net (the "Service"). The Service provides AI-powered plain-English analysis of legal documents to help ordinary people understand contracts. Lexplayn LLC and Contract Decoder are not a law firm and do not provide legal advice.

For questions about this Privacy Policy, contact us at: privacy@contractdecoder.net

2. Information We Collect

Information You Provide

Information Collected Automatically

⚠️ Important: Do not upload documents containing Protected Health Information (PHI) as defined under HIPAA. Contract Decoder is not HIPAA-compliant and is not designed to handle medical records or healthcare-related personal health information. We also strongly recommend redacting any sensitive personal identifiers — such as Social Security numbers, financial account numbers, or passport numbers — before uploading any document.

3. How We Use Your Information

We use the information we collect to:

We do not use your information for targeted advertising. We do not currently sell your personal data to third parties. If this practice changes in the future, we will update this Privacy Policy, provide you with clear notice, and give you the opportunity to opt out as required by applicable law including the Washington Privacy Act and CCPA.

4. Anonymised Data and Research

We may use aggregated, anonymised, and de-identified data derived from your use of the Service for the following purposes:

Anonymised data does not identify you personally. We take reasonable technical steps to ensure that data used for these purposes cannot be re-identified. We will not attempt to re-identify anonymised data unless required by law. Only staff bound by appropriate confidentiality obligations will have access to non-anonymised content for the purpose of improving our Service.

5. License to Your Content

You retain all ownership rights in the documents, text, and images you upload to the Service. By submitting content to the Service, you grant Lexplayn LLC a limited, non-exclusive, worldwide, royalty-free license to use, reproduce, process, and display your content solely as necessary to:

This license does not permit us to sell your content to third parties, use it for purposes unrelated to the Service, or use identifiable content to train external AI models. This license terminates when your submitted content is deleted from our systems as described in Section 7.

You represent and warrant that you have the legal right to submit any content you upload and that doing so does not violate any applicable law, confidentiality obligation, or third-party rights. You are solely responsible for ensuring you are authorized to share any document you upload.

6. Third-Party Services and AI Processing

Anthropic (Claude AI)

When you submit a contract for analysis, the text or image content is transmitted to Anthropic, PBC via their API for AI processing. This is essential to how the Service works. Anthropic's API terms state that they do not train their models on API-submitted content and do not retain submitted data beyond the processing of each request. Your use of Contract Decoder is also subject to Anthropic's Privacy Policy at anthropic.com/privacy.

Netlify

The Service is hosted on Netlify, Inc. Netlify may collect standard server logs and analytics data as part of providing hosting services. Netlify maintains SOC 2 Type II certification and industry-standard security practices. Their privacy policy is available at netlify.com/privacy.

American Bar Association

If you click "Find an attorney," you will be directed to the American Bar Association's website. We do not share your personal information with the ABA and their privacy practices are governed by their own privacy policy.

No Responsibility for Third-Party Services

We are not responsible for the privacy practices, content, accuracy, or availability of any third-party services linked from or used in connection with our Service. Your use of any third-party service is entirely at your own risk and governed solely by that service's terms and privacy policies. We encourage you to review the privacy policies of all third-party services you use in connection with Contract Decoder.

7. Data Retention and Deletion

Lexplayn LLC does not permanently store the contract text, documents, or images you submit for analysis. Submitted content is processed in real time and automatically deleted from our systems within 24 hours of submission.

After deletion, we retain only anonymised, de-identified analytics data that cannot be linked back to you or your document. This anonymised data may be retained indefinitely for research and service improvement purposes as described in Section 4.

If you contact us by email, we will retain that correspondence for as long as necessary to respond to your inquiry and for a reasonable period thereafter, typically no longer than two years.

To request deletion of any personal information we hold about you, contact us at privacy@contractdecoder.net. We will respond within 45 days.

8. Cookies

Cookies are small text files placed on your device when you visit a website. They help websites remember information about your visit and improve your experience. Contract Decoder uses cookies in the following limited ways:

Essential Cookies

These cookies are strictly necessary for the Service to function correctly. They enable core functionality such as session management during a contract analysis. You cannot opt out of essential cookies while continuing to use the Service.

Analytics Cookies

Our hosting provider (Netlify) may set analytics cookies that collect anonymous, aggregate usage statistics — such as which pages are visited most and how users navigate the Service. These analytics help us improve performance and user experience. This data does not personally identify you and is not shared with advertising networks.

No Advertising Cookies

We do not use advertising cookies, tracking pixels, retargeting scripts, or any cookies for targeted marketing or behavioral advertising purposes. We do not allow third-party advertisers to set cookies through our Service.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling essential cookies may affect the functionality of the Service. For more information on managing cookies, visit allaboutcookies.org.

Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. We currently do not alter our data collection practices in response to DNT signals, as there is no universally accepted standard for DNT compliance. We will revisit this as industry standards develop.

9. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security. We strongly recommend that users redact sensitive personal identifiers from documents before uploading.

In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.

10. Your Rights

Depending on where you are located, you may have the following rights regarding your personal information:

To exercise any of these rights, contact us at privacy@contractdecoder.net. We will respond to verified requests within 45 days. We will not discriminate against you for exercising any of your privacy rights.

Because we automatically delete submitted documents within 24 hours, we are generally unable to retrieve, correct, or delete contract content you previously submitted after that deletion window has passed.

11. California Residents — CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information.

Categories of Personal Information We Collect

We may collect the following categories of personal information from California residents:

Your CCPA/CPRA Rights

How to Submit a CCPA Request

To exercise your California privacy rights, email us at privacy@contractdecoder.net with "California Privacy Request" in the subject line. We will respond to verifiable consumer requests within 45 days, free of charge. You may submit up to two requests per 12-month period.

Shine the Light — California Civil Code Section 1798.83

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes. To make such a request, contact us at privacy@contractdecoder.net.

12. Washington State Residents

Washington State residents have rights under the Washington Privacy Act (WPA) and the Washington My Health My Data Act (MHMDA).

Washington Privacy Act Rights

Washington residents have the right to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of its use for targeted advertising or sale. To exercise these rights, contact us at privacy@contractdecoder.net. We will respond within 45 days. If we decline your request, you may appeal that decision by replying to our response. Unresolved appeals may be escalated to the Washington State Attorney General.

Washington My Health My Data Act

Lexplayn LLC does not knowingly collect consumer health data as defined under the Washington My Health My Data Act. We explicitly prohibit users from uploading documents containing Protected Health Information. If you believe we have inadvertently received your health data, please contact us at privacy@contractdecoder.net and we will promptly delete it.

13. Children's Privacy

Contract Decoder is not directed to children under the age of 13. Lexplayn LLC does not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted information through our Service, please contact us at privacy@contractdecoder.net immediately and we will take steps to delete that information.

14. Not Legal Advice

Contract Decoder provides general legal information only. The analysis generated by our Service does not constitute legal advice, does not create an attorney-client relationship with Lexplayn LLC, Contract Decoder, or any affiliated person, and should not be relied upon as a substitute for advice from a licensed attorney. Artificial intelligence was used to generate all contract analyses. AI systems can make errors, omissions, and may not account for jurisdiction-specific laws, recent legal developments, or the particular circumstances of your situation. Always consult a qualified attorney before making any legal decisions.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the Service. Material changes will be announced by updating the "Last Updated" date at the top of this page and, where required by law, by providing notice through the Service or by email. Non-material changes take effect immediately upon posting.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically. Questions regarding this Policy should be directed to privacy@contractdecoder.net.

Questions or Concerns?

We take your privacy seriously. If you have any questions about this Privacy Policy or how we handle your information, please reach out.

privacy@contractdecoder.net