Privacy Policy

Last updated: 15 February 2026

Overview

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you access or use our software-as-a-service (SaaS) products, including AI-assisted contract review tools and related web applications (the "Services").

By using the Services, you acknowledge that your information will be handled as described in this Privacy Policy.

Information We Collect

We may collect the following categories of information:

1) Account and profile information

• Name
• Email address
• Authentication details and login metadata
• Account preferences and settings

2) Billing and subscription information

• Purchase history, plan details, and credit balance data
• Payment-related identifiers from payment processors
• Limited billing contact details
• We do not store full payment card numbers; payment processing is handled by third-party payment providers.

3) Content you submit

• Documents, files, prompts, and messages you upload or submit
• Follow-up questions and chat history associated with your account
• Metadata about uploaded files (for example, filename, size, type, and processing status)

4) Usage and technical information

• Device and browser information
• IP address and approximate location
• Log data, diagnostics, and analytics events
• Cookie and similar tracking data, subject to your choices

How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve the Services
• Authenticate users and secure accounts
• Process payments, credits, and transactions
• Deliver AI analysis results and related features
• Communicate service notices, support responses, and updates
• Detect fraud, abuse, security incidents, and policy violations
• Comply with legal obligations and enforce our terms

AI Processing and Service-Specific Data Use

When you use AI features, your submitted content may be processed by AI service providers acting on our behalf to generate analysis and responses. We may also process technical metadata (for example, token usage, processing time, and workflow logs) to operate features, measure performance, allocate credits, and improve reliability.

You are responsible for ensuring you have the right to submit any content you upload and that it does not violate applicable law or third-party rights.

Cookies and Similar Technologies

We use cookies and similar technologies for:

• Essential site functionality
• Preferences and consent management
• Security and fraud prevention
• Analytics and product performance

Where required by law, we request consent for non-essential cookies. You can manage cookie preferences through our cookie settings tools and your browser controls.

When We Share Information

We do not sell personal information. We may share information:

• With service providers that help deliver the Services (for example, cloud hosting, authentication, payment processing, email delivery, analytics, and AI infrastructure)
• With professional advisers, auditors, and legal counsel under confidentiality obligations
• In connection with a merger, financing, acquisition, or asset sale
• To comply with law, regulation, legal process, or enforceable governmental request
• To protect rights, property, safety, users, or the public
• With your consent or at your direction

International Data Transfers

Our providers and infrastructure may operate in multiple countries. Where information is transferred across borders, we use appropriate safeguards as required by applicable law.

Data Retention

We retain personal information for as long as necessary to:

• Provide the Services and maintain your account
• Meet legal, accounting, tax, and regulatory obligations
• Resolve disputes and enforce agreements
• Maintain security, audit, and fraud-prevention records

Retention periods may vary by data category and service context.

Data Security

We implement reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

• Access, correct, or delete personal information
• Request a copy or portability of certain information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of marketing communications

To exercise rights, contact us using the details below. We may need to verify your identity before processing your request.

Children

The Services are intended for business and adult users and are not directed to children under 16. If you believe a child has provided personal information, contact us so we can take appropriate steps.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other reasonable means. The "Last updated" date shows when this Privacy Policy was most recently revised.

Contact

For privacy questions or requests, contact: contact@instsoft.com.au