Privacy Policy

Last updated: 21 April 2026

Citrus (“Citrus”, “we”, “us”, “our”) is an AI-powered contract analysis service (the “Service”) operated as a sole trader business based in Sydney, Australia. This Privacy Policy explains how we handle your information when you use the Service. The name of the operator will be disclosed on request and published on this page once ABN registration is complete.

1. Information we collect

Contract text: Documents you upload or text you paste for analysis. Contract text is processed in real-time and is not stored after analysis is complete unless you explicitly save the analysis to your library.
Account information: Your email address, name, and authentication identifiers from Google or other OAuth providers you use to sign in.
Payment information: Payments are handled by our third-party payment processor (Lemon Squeezy). We do not collect or store credit card details.
Usage data: We may collect standard usage information such as IP address, browser type, and pages visited to operate and protect the Service.

2. How we use your information

To provide and improve the Service
To process payments and manage your subscription
To prevent abuse and enforce usage limits
To contact you about product updates you’ve opted into
To comply with legal obligations under Australian law

3. Data sharing

We use third-party service providers to operate the Service, including for AI processing (Anthropic), hosting (Vercel), data storage (Supabase), and payment processing (Lemon Squeezy). These providers process data on our behalf in accordance with their own privacy policies and our agreements with them. We do not sell your personal information.

4. Data retention

Contract text is not retained after analysis unless you save the analysis to your library. Saved analyses are retained until you delete them or close your account. Payment records are retained as required by Australian tax and accounting laws. Usage data is retained for a limited period for security purposes.

5. Security

We use commercially reasonable measures to protect your information, including encryption in transit and at rest. However, no system is completely secure and we cannot guarantee absolute security.

6. Your rights under Australian Privacy Law

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to access, correct, or request deletion of your personal information. You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC). To exercise these rights, contact us at hello@citruscan.com.

7. International transfers

Your information may be processed in countries other than Australia, including the United States, where our cloud providers operate. By using the Service, you consent to such transfers. We take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

8. Children

The Service is not intended for individuals under 18. We do not knowingly collect information from children.

9. Cookies

We use essential cookies to keep you signed in and analytics cookies to understand product usage. You can disable non-essential cookies in your browser settings; some parts of the Service may not function correctly if you do.

10. Changes

We may update this policy from time to time. Material changes will be announced on the Service. Continued use after changes constitutes acceptance.

11. Contact

Privacy enquiries: hello@citruscan.com
Citrus, Sydney, Australia.