Privacy Policy

PlainDoc (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our AI-powered employment contract analysis service, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

1. Information We Collect

Contract text: When you upload a PDF or take a photo of your employment contract, we extract and process the text to generate an analysis. This text may contain personal information such as your name, employer name, salary, and employment terms.

Account information: When you sign in, our authentication provider (Clerk) collects your email address and basic profile information.

Payment information: When you purchase pay-per-use page packs or subscriptions, our payment processor (PayMongo) handles your payment details. We do not store your card or payment account information.

AI processing data: To produce your analysis, we send the extracted contract text to Anthropic's Claude API. The transmission may include names, employers, compensation, and other terms appearing in your document. Anthropic processes this data to generate a response under their API terms; we do not use your data to train foundation models (see below).

Analysis results (opt-in): If you choose to save an analysis, the AI-generated results (summary, risk score, risk flags, and recommendations) are stored in your account so you can view them later from your dashboard. Saving is off by default — you must opt in before each analysis is stored. The original contract text is not stored — only the analysis output you choose to save.

Usage data: We track your purchased page balance, free-tier pages, subscription status, and analysis counters using Upstash Redis.

2. How We Use Your Information

• To analyze your employment contract using AI (Anthropic's Claude)
• To authenticate your account and manage your session
• To process payments and track your pay-per-use pages or subscription status
• To enforce rate limits and prevent abuse

3. How We Store Your Data

Your original contract is never stored. The uploaded document is processed entirely in memory and immediately discarded after the AI generates the analysis. We do not save, cache, or log your contract text.

Saved analyses are opt-in. Analysis results are stored in MongoDB only when you explicitly choose to save them to your dashboard. You can delete any or all saved analyses at any time.

Retention: Saved analyses are retained for up to one year from the date of saving, after which they are automatically removed (technical deletion via database TTL). You may delete them sooner at any time.

Your documents are never used to train AI models. We use Anthropic's Claude API under terms that do not use API inputs to train consumer-facing models.

Account information is managed by Clerk and subject to their privacy policy. Payment information is managed by PayMongo and subject to their privacy policy. Usage counters, purchased page balances, and subscription fields are stored in Upstash Redis, while idempotency records expire automatically.

4. AI Processing Transparency (NPC Advisory 2024-04)

In line with National Privacy Commission Advisory No. 2024-04 on transparency in automated processing, we disclose the following:

• Nature of processing: Contract text is sent to Claude (Anthropic) to generate a structured risk assessment and plain-language summary. Processing is automated; output is informational, not a legal determination.
• Purpose: To help you understand employment contract terms against general Philippine labor-law reference material.
• Risks: AI outputs may be incomplete, outdated, or incorrect for your specific situation. They are not a substitute for professional legal advice.
• Accountability: PlainDoc is responsible for how the service is offered; Anthropic provides the model under their terms. Contact us for data subject requests.
• Your rights: You may access, export, or request deletion of saved analyses as described in Section 5.

5. Privacy Engineering (NPC Advisory 2025-02)

We apply privacy-by-design principles: we minimize data collected (no storage of raw contracts), use role-based access on infrastructure, offer explicit opt-in before saving analyses, support full deletion of saved data, and document retention limits.

6. Who We Share Your Data With

We share data only with the following third-party services, strictly for the purposes described above:

• Anthropic — Receives your contract text for AI analysis (API terms — not used to train consumer models on your inputs)
• Clerk — Manages authentication and user accounts
• PayMongo — Processes payments for page packs and subscriptions
• MongoDB Atlas — Stores analysis results you opt in to save (AI-generated output, not original contracts)
• Upstash — Stores usage counters, subscription fields, purchased page balances, and rate-limiting data
• Vercel — Hosts the application infrastructure

We do not sell, rent, or share your personal information with any other third parties.

7. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the right to:

• Access — Request a copy of your personal data we process
• Correction — Request correction of inaccurate personal data
• Erasure — Request deletion of your personal data (including deleting all saved analyses in Settings)
• Object — Object to the processing of your personal data
• Portability — Download your saved analyses as structured JSON from the dashboard

To exercise any of these rights, contact us at the email address below.

8. Cookies and Tracking

We use essential cookies for authentication (managed by Clerk) and theme preferences (stored in localStorage). We do not use advertising cookies or third-party tracking tools.

9. Children's Privacy

PlainDoc is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.

11. Contact Us

For privacy-related questions, data subject requests, or concerns:

Email: privacy@plaindoc.app