Legal documents
Privacy Policy &
Terms of Service
Last updated: June 2025
1. Overview
Coventis AI (“we,” “our,” or “the Platform”) provides an AI-powered contract analysis service designed for legal professionals, including law firms and in-house corporate legal teams. We understand that the documents you upload are among the most sensitive materials in your professional practice.
This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data. Our Terms of Service follow in Section 11. By accessing or using the Platform, you agree to both.
2. Data we collect
Account data
When you register, we collect your email address and an encrypted password hash (or OAuth token if you sign in via Google). We do not store raw passwords.
Uploaded documents
Contract PDFs you upload are stored in your private, isolated workspace. Access is gated by your authenticated session. No other user, employee, or third party can access your documents without your explicit authorisation or a valid legal compulsion order.
Analysis outputs
AI-generated analysis results, risk findings, and reports are stored in association with your account so you can retrieve them later. These outputs are private to your workspace.
Usage metadata
We collect basic usage logs (page requests, API call timestamps, error events) for operational monitoring. These logs do not include document content.
3. How we use your data
We use your data exclusively to:
- Provide the contract analysis service you requested
- Authenticate your identity and protect your workspace
- Deliver analysis reports and matter history within your account
- Operate, maintain, and improve the reliability of the Platform infrastructure
- Comply with applicable legal obligations
We do not use your data for advertising, profiling, or any purpose beyond the service you signed up for.
4. Storage & security
All documents and analysis data are encrypted in transit using TLS 1.3 and at rest using AES-256. Each user's data is logically isolated within a private workspace identified by your authenticated user ID.
Our infrastructure is hosted on industry-standard cloud providers with SOC 2-certified data centres. Access to production systems is restricted to authorised engineering personnel only, under strict access control policies.
5. AI model training — our firm commitment
Your contract data is never used to train, fine-tune, or improve any AI model — by Coventis AI or any third-party AI provider.
We pass your documents to AI inference APIs (such as Hugging Face Inference Endpoints) solely to generate your analysis. These requests are made under data processing agreements that prohibit the use of your input data for model training purposes.
We will update this policy and notify users if this practice ever changes. We do not anticipate it ever will — our business model is subscription-based, not data-based.
6. Third-party services
We use the following sub-processors to operate the Platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Authentication & database | Email, encrypted credentials, analysis metadata |
| Hugging Face | AI inference | Document text (inference only, no training) |
| Google OAuth | Optional sign-in | Email & name (if you choose Google sign-in) |
We do not sell or share your data with any other party. Sub-processors are contractually bound to process data only as instructed by us.
7. Data retention & deletion
Your uploaded contracts and analysis reports are retained for as long as your account is active. You may delete individual contracts at any time from your workspace dashboard, and the deletion is immediate and permanent.
If you close your account, all associated documents, analysis outputs, and personal data are permanently deleted within 30 days. Anonymised operational logs (with no document content) may be retained for up to 90 days for security auditing.
8. Your rights
Depending on your jurisdiction, you have the right to:
- Access — request a copy of data we hold about you
- Rectification — correct inaccurate personal data
- Erasure — request deletion of your account and all associated data
- Portability — receive your data in a machine-readable format
- Objection — object to processing on legitimate-interest grounds
- Restriction — request that we limit processing of your data
To exercise any of these rights, contact us at privacy@coventis.ai. We will respond within 30 days.
9. Attorney-client privilege & professional confidentiality
We understand that contracts processed through this Platform may be subject to attorney-client privilege or other professional confidentiality obligations. Coventis AI maintains strict confidentiality over all documents and analysis outputs.
Legal professionals using this Platform are responsible for assessing whether use of an AI service is consistent with their ethical obligations under applicable bar association rules and client engagement agreements. We strongly recommend:
- Reviewing your jurisdiction's bar guidance on AI tools before use
- Disclosing use of AI analysis tools to clients as appropriate
- Having a qualified attorney review all AI-generated outputs before acting on them
10. Legal disclaimer
Coventis AI does not provide legal advice. All analysis outputs — including risk findings, clause summaries, signing recommendations, and playbook deviations — are generated by an artificial intelligence system and are provided for informational and productivity purposes only.
No output from this Platform constitutes legal advice, creates an attorney-client relationship, or should be relied upon as a substitute for advice from a qualified legal professional. Always have a licensed attorney review AI-generated findings before making any legal or commercial decision.
Coventis AI accepts no liability for decisions made in reliance on AI-generated analysis outputs.
11. Terms of service
Eligibility
You must be at least 18 years old and have the legal authority to enter into contracts on behalf of yourself or your organisation to use this Platform.
Acceptable use
You agree not to:
- Upload documents you do not have the right to share with a third-party service
- Attempt to reverse-engineer, scrape, or extract data from the Platform
- Use the Platform to facilitate any illegal activity
- Share your account credentials with unauthorised parties
- Misrepresent AI-generated outputs as independent legal advice
Intellectual property
You retain all intellectual property rights in the documents you upload. Coventis AI claims no ownership over your documents or the analysis outputs generated from them.
Limitation of liability
To the maximum extent permitted by law, Coventis AI's total liability for any claim arising from use of the Platform is limited to the subscription fees you paid in the 12 months preceding the claim. We are not liable for indirect, incidental, or consequential damages of any kind.
Modifications
We may update these terms at any time. Continued use of the Platform after notification of changes constitutes acceptance. Material changes will be communicated by email and an in-app notice at least 30 days in advance.
Governing law
These terms are governed by and construed in accordance with applicable law. Any disputes shall be resolved through binding arbitration unless prohibited by local law.
12. Contact
For any privacy, data, or legal enquiries, please contact: