Privacy Policy

• Contract text: Documents you upload or text you paste for analysis. When you are signed in, the contract text is saved with your analysis in your private library so you can revisit and compare it later. You can ask us to delete it at any time (see Data retention below).
• Account information: Your email address, name, and sign-in credentials: identifiers from Google if you use Google sign-in, or a salted password hash held by our authentication provider if you sign up with email and password. We never store passwords in plain text.
• Payment information: Payments are handled by our third-party payment processor (Lemon Squeezy). We do not collect or store credit card details.
• Usage data: We may collect standard usage information such as IP address, browser type, and pages visited to operate and protect the Service.

• To provide and improve the Service
• To process payments and manage your subscription
• To prevent abuse and enforce usage limits
• To contact you about product updates you’ve opted into
• To comply with legal obligations under Australian law

We use a small number of trusted service providers to operate the Service, including enterprise AI, cloud hosting, data storage, and payment processing (Lemon Squeezy, our merchant of record). These providers process data on our behalf under agreements that restrict their use of your data to providing the Service. We do not sell your personal information.

We do not use your contracts or their contents to train AI models, and our AI providers are contractually prohibited from using your contract text to train their models. The only exception is the optional, off-by-default benchmark contribution described in section 4, and even then, only anonymised structured data is used, never contract text.

A Data Processing Agreement is available to business customers on request at hello@citruscan.com.

Citrus compares your contract against market benchmarks built from real agreements. You can choose to help improve those benchmarks by contributing data from a contract you analyse. This is entirely optional and off by default; a contract is only ever used for benchmarking if you tick the consent box when you analyse it.

If you opt in:

• Only anonymised, structured data leaves your analysis, for example the contract type, governing-law jurisdiction, industry, and de-identified clause metrics such as liability-cap shape, payment terms, and auto-renewal notice periods.
• Your raw contract text and the identities of the parties are never shared and never enter the benchmark set.
• Figures only ever appear pooled across 20 or more contracts from 8 or more different customers. We do not publish a benchmark for any cohort smaller than this, so no individual contract, and no single organisation's contracts, can be singled out from the aggregate.

Contributed data is de-identified and aggregated, and is used to operate and improve the Service consistent with the Australian Privacy Principles. You can stop contributing future contracts at any time by leaving the consent box unticked, and you can ask us about data already contributed by emailing hello@citruscan.com.

Analyses you run while signed in, including the contract text, are saved to your private library and retained until they are deleted. While an analysis runs, a short-lived server-side copy of the result is kept so an interrupted connection does not lose it; that copy is deleted once the analysis is saved, or automatically within 48 hours. There is no self-serve delete yet: email hello@citruscan.com and we will delete specific analyses or your whole account promptly, normally within a few business days. Payment records are retained as required by Australian tax and accounting laws. Usage data is retained for a limited period for security purposes.

We use commercially reasonable measures to protect your information, including encryption in transit and at rest. However, no system is completely secure and we cannot guarantee absolute security.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner without undue delay, in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth).

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to access, correct, or request deletion of your personal information. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC). To exercise these rights, contact us at hello@citruscan.com.

Your documents and saved analyses are stored in the Asia-Pacific region (Tokyo, Japan). Some of our service providers process information outside Australia, including in Japan and the United States, in the course of providing the Service. We take reasonable steps, consistent with Australian Privacy Principle 8, to ensure overseas recipients handle your information in accordance with the Australian Privacy Principles.

The Service is not intended for individuals under 18. We do not knowingly collect information from children.

We use essential cookies to keep you signed in and analytics cookies to understand product usage. You can disable non-essential cookies in your browser settings; some parts of the Service may not function correctly if you do.

We may update this policy from time to time. Material changes will be announced on the Service. Continued use after changes constitutes acceptance.

Privacy enquiries: hello@citruscan.com
Citruscan Pty Ltd (ABN 33 698 868 870), Sydney, Australia.