Privacy Policy — MIGS | AI Contract Analysis Platform

Information We Collect

Account Information

Name, email address, phone number (optional), mailing address (optional), profile photo (optional), and authentication credentials (password hashes — we never store plaintext passwords).

Documents You Upload

Original uploaded files (PDF, Word, images) stored in encrypted cloud storage, extracted text, AI-generated analysis results, and document metadata.

Chat and Conversation Data

Chat messages you send and AI responses, conversation metadata, and bookmarked messages.

Claims and Negotiation Data

Claim details, negotiation messages and strategy notes, and related documents.

Location Data (Opt-In)

Geographic coordinates and weather zone identifier for disaster alert matching. You can disable this at any time in Settings.

Device and Technical Information

IP address, browser type, device type, operating system, and pages visited within the Service.

How We Use Your Information

Provide the Service — analyze documents, generate AI insights, power chat, monitor risks, deliver notifications
Process documents through AI providers — your document text and queries are sent to third-party AI service providers to generate analysis
Improve the Service — monitor errors, analyze aggregate usage patterns, improve AI accuracy
Ensure security — detect unauthorized access, prevent abuse, maintain audit trails

We do NOT: sell your personal data, share data with insurance companies or advertisers, train third-party AI models on your documents, or send unsolicited marketing from third parties.

Third-Party Service Providers

Document text is transmitted to the following AI providers solely to generate analysis for you:

Google Gemini — AI document analysis and chat
OpenAI — AI document analysis and chat
Anthropic — AI analysis
Google Cloud Document AI — OCR and text extraction

Infrastructure: Supabase (database, auth, storage), Vercel (hosting), Sentry (anonymized error monitoring), Resend (email delivery).

Data Retention

Account information — until you delete your account
Uploaded documents — until you delete them or your account
Chat messages — 365 days, then automatically deleted
Audit and usage logs — 90 days, then automatically deleted
Risk data cache — 24 hours

Data Security

We use industry-standard security measures including encryption in transit (TLS/HTTPS) and encryption at rest provided by our infrastructure provider. Access to user data is restricted and logged. Passwords are hashed; we never store plaintext passwords. Personally identifiable information is removed from error monitoring data.

Your Rights

Export your data (Settings → Data & Storage)
Delete your account and all data (Settings → Profile → Delete Account)
Delete individual documents (Library page)
Manage location sharing (Settings → Preferences)
Manage notifications (Settings → Notifications)

Privacy Policy — MIGS