VValorex

Legal

Valorex — Privacy Policy

Last updated: [DATE_PLACEHOLDER]

1. Introduction

This Privacy Policy ("Policy") describes how Valorex ("Valorex," "we," "us," or "our") collects, uses, stores, discloses, and protects information in connection with our AI-powered contract-analysis service (the "Service"). The Service reviews commercial contracts that you upload and produces a risk report identifying potential risks, contradictions, missing protections, and financial exposure, with citations drawn from the contract text.

This Policy applies to information we process when you visit our website, create an account, upload documents, or otherwise use the Service. By using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not use the Service.

For any privacy-related question or request, email support@getvalorex.com.

2. Who Is Responsible for Your Data

The entity responsible for your information is Valorex, owned and operated by Asaf Eliyahu, located in Israel, at Derech Begin 158, Tel Aviv, Israel. You can reach us at support@getvalorex.com.

3. Information We Collect

3.1 Information you provide directly

  • Account information. When you register, we collect your name, email address, and a password. Passwords are stored in hashed (encrypted) form and are never stored in plain text.
  • Contract documents. The files you upload for analysis (for example, PDF, DOCX, DOC, RTF, or TXT files). These documents may contain confidential, privileged, or commercially sensitive information. You are responsible for ensuring you have the right to upload and process any document you submit.
  • Analysis outputs. The risk reports, findings, citations, and related outputs generated from your documents.
  • Communications. Information you provide when you contact us for support, feedback, or other inquiries.
  • Consent records. Where you check a consent box or agree to terms, we record that you did so, along with the time.

3.2 Information collected automatically

  • Usage and log data. Technical information such as log-in timestamps, features accessed, actions taken within the Service, browser and device type, and IP address.
  • Error and diagnostic data. Logs generated when something goes wrong, used to diagnose and fix problems.
  • Cookies. We use strictly necessary cookies to keep you logged in and to operate the Service securely.

3.3 Payment information

Payments are processed by our third-party payment provider, Paddle, which acts as the merchant of record. Paddle collects and processes your payment details directly. We do not receive or store your full payment card details on our servers. We receive limited information such as confirmation of payment, subscription status, and billing contact details.

4. How We Use Your Information

We use your information only for the following purposes:

  • To provide the Service — to analyze the contracts you upload and generate your reports.
  • To operate your account — to authenticate you, keep your account secure, and manage your subscription.
  • To process payments — through Paddle, and to manage billing, renewals, and cancellations.
  • To provide support — to respond to your questions, requests, and issues.
  • To maintain and improve the Service — to monitor performance, fix errors, ensure security, and improve features. When we use data to improve the Service, we rely on aggregated or technical usage data, not on the content of your contracts (see Section 6).
  • To comply with law — to meet legal obligations and to protect our rights, users, and the public where necessary.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. Legal Bases for Processing (where applicable)

Where data-protection law requires a legal basis (for example, under the GDPR for users in the European Economic Area or the UK), we rely on: performance of a contract (to provide the Service); legitimate interests (to secure, operate, and improve the Service); consent (where you have given it, which you may withdraw at any time); and legal obligation (where required by law).

6. How Your Contracts Are Handled

We understand that the contracts you upload are highly sensitive. This section explains, specifically, how they are handled.

  • Per-user isolation. Your uploaded contracts and their analysis results are stored in a manner isolated to your account. Other customers cannot access your documents. Access controls and row-level security are used to enforce this separation.
  • AI processing via Anthropic. To analyze your contract, its text is transmitted to Anthropic, the provider of the Claude AI models, solely for the purpose of generating your report.
  • No training on your data. Anthropic does not use data submitted through its API to train its models.
  • We do not train AI on your content. Valorex does not use the content of your contracts to train, fine-tune, or develop any AI model.
  • Encryption. Your documents are encrypted in transit and at rest.
  • Deletion on request. You may delete your documents at any time, and you may request deletion of your account and associated data (see Section 9).

7. How We Share Information

We share information only as follows:

  • Service providers. We use trusted third parties to operate the Service: Anthropic (AI analysis of your contracts; Anthropic does not use API-submitted data to train its models); Supabase (authentication, database, and secure storage); Paddle (payment processing and billing, as merchant of record); our email provider (sending transactional emails such as confirmations and password resets); and our hosting provider (hosting the application). Each provider processes information only as needed to perform its function.
  • Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of Valorex, our users, or others.
  • Business transfers. If Valorex is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

We do not sell your information to third parties.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Contract documents and reports are retained while your account is active or until you delete them, whichever is earlier. Account information is retained while your account is active. After account deletion, we delete your documents and associated personal data, except for limited records we are legally required to keep (for example, transaction records for tax or accounting purposes) and backup copies that are deleted on a rolling basis. You may delete individual documents at any time within the Service.

9. Your Rights and Choices

Depending on your location, you may have some or all of the following rights: access (to know what personal data we hold about you); correction (to correct inaccurate or incomplete data); deletion (to request deletion of your data); portability (to receive a copy of your data in a portable format); restriction or objection (to restrict or object to certain processing); and withdrawal of consent (where processing is based on consent). We will not discriminate against you for exercising your rights.

To exercise any right, email support@getvalorex.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

If you are in the European Economic Area or the UK, you also have the right to lodge a complaint with your local data-protection authority. If you are a California resident, you have rights under the California Consumer Privacy Act, including the rights to know, delete, correct, and opt out of the sale or sharing of personal information (we do not sell or share your personal information as those terms are defined).

10. Data Security

We use industry-standard technical and organizational measures to protect your information, including: encryption of data in transit and at rest; per-account data isolation and access controls; storage of passwords in hashed form only; and restricting internal access to data on a need-to-know basis. However, no method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security, and you provide information at your own risk.

11. International Data Transfers

Valorex is operated from Israel and serves customers in the United States and potentially other countries. Your information — including your contract documents — may be processed and stored in countries other than the one in which you reside, including by our service providers. These countries may have data-protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these locations. Where required by law, we take steps to ensure appropriate safeguards are in place for such transfers.

12. Children's Privacy

The Service is a professional business tool intended for users aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it.

13. Third-Party Links

The Service or our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

14. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Policy or your personal information, contact us at support@getvalorex.com. Registered business address: Derech Begin 158, Tel Aviv, Israel.