Privacy Policy

1. Information We Collect

We collect only the information necessary to provide and improve the StellarWeb Risk Auditor service:

• Account Information: Collected during account creation via Clerk (name, email address).
• Audit Results: When you run an audit, we store the analysis output — document filename, date, document category, the risk factors identified, short verbatim clause excerpts used as supporting evidence, and example neutral clauses — so we can show your dashboard history and release paid content you have purchased.
• Usage & Billing Records: Audit counts (for quota enforcement) and payment status flags. Payment card details are handled exclusively by Stripe and never touch our servers.

2. Document Processing

We understand the sensitive nature of legal agreements. When you upload a document for analysis:

• Transient Processing: Your uploaded file (PDF or Word) is processed in memory to extract its text. The original file is not written to disk or saved to our storage systems.
• What We Retain: Only the structured analysis output described in Section 1 is retained — not the document itself. Retained excerpts are limited to short quotations that identify the specific clauses driving each finding.
• No AI Training by Us: We do not use your documents or extracted text to train, fine-tune, or improve machine learning models.

3. Data Retention & Deletion

• Automatic Expiration: Audit history and analysis results are retained for 90 days, after which they are automatically deleted from our systems. Payment-unlock records expire on the same schedule (30 days for individual document unlocks).
• Self-Service Deletion: You may permanently delete your entire audit history at any time using the “Clear History” control on your dashboard. Deletion is immediate and irreversible.
• Account Deletion: To delete your account and associated billing records, contact us at info@stellarweb.ai and we will complete the request within 30 days, except where retention is required by law (e.g., tax and payment records).

4. Third-Party Data Sharing

We share data only with the infrastructure partners strictly necessary to operate the service:

• Clerk: Secure authentication and user session management.
• Stripe: Encrypted payment processing. We never store your card data.
• Upstash (Redis): Encrypted-in-transit and encrypted-at-rest storage of your audit results, subject to the retention limits in Section 3.
• AI Inference Providers: Extracted document text is transmitted over TLS-encrypted APIs solely to perform your requested analysis. Under our providers’ API terms, this data is not used to train their models; providers may retain API inputs briefly (up to 30 days) solely for abuse monitoring before deletion.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. Your Rights

Depending on your jurisdiction (including GDPR and CCPA/CPRA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. The dashboard’s “Clear History” control satisfies most deletion requests instantly; for anything else, email info@stellarweb.ai and we will respond within 30 days.

6. Changes to This Policy

We will post any changes to this policy on this page and update the “Last Updated” date above. Material changes will be communicated by email to registered users.