1. Overview

PaidWrite ("we," "our," or "us") is a product of ContraForge LLC, California. It provides an AI-powered document analysis service for contractors and subcontractors. This Privacy Policy explains how we collect, use, and protect information when you use our mobile app, browser extension, email-to-scan channel, or related services.

PaidWrite has no user accounts, no logins, and no passwords. Your identity in the service is a random per-device identifier.

2. Information We Collect

2.1 Device Identifier

When you first launch PaidWrite, we generate a random device UUID (a unique identifier). This identifier is stored on your device and sent with every API request. We use it to associate your scans, credit balance, and history with your device without requiring an account.

2.2 Documents and Extracted Text

When you submit a document for analysis:

The original file (photo, PDF, or image) is used only to extract text and is deleted within 30 seconds of upload.
The extracted text is held encrypted only while the analysis runs (usually under a minute) and is deleted when the analysis finishes or fails. A scheduled sweep runs every hour and scrubs any stale copy that was not cleaned up in-line.
Only the risk assessment (document type, risk level, compliance issues, summary) is kept. It contains no names, addresses, or dollar amounts from your document.

Text extraction (OCR) runs on our servers, not on your device.

2.3 Analysis Results

We store structured analysis results (document type, risk level, compliance issues, summary, token usage) associated with your device UUID. These results are designed not to contain personally identifiable information extracted from documents.

2.4 Payment Information

Payments are processed by Stripe through Stripe Checkout, which opens in your device's system browser. We do not store full payment card details. We store the Stripe session ID, transaction amount, credits granted, and payment status.

2.5 Email Address (Optional)

If you email a document to scan@email.paidwrite.app, we receive your sending address and use it to reply with the analysis and to link the scan to a phone or extension that has associated that address. If you join the waitlist on our website, your email address is stored with our email provider so we can tell you when the app is available. We use email addresses only to send results, receipts, and the messages you asked for.

2.6 Website and Extension Telemetry

Our website uses Google Analytics 4 only after you accept analytics cookies in the consent banner; with consent declined, no analytics script loads. Error monitoring (Sentry) in the app, extension, and API receives error reports and stack traces. Sentry never receives document text.

3. Information We Do NOT Collect

We do not collect Social Security Numbers, EINs, or other tax identifiers from W-9s
We do not collect bank account numbers, routing numbers, or financial account details
We do not keep original document files or images after text extraction
We do not keep extracted document text after the analysis finishes
We do not sell your data to third parties

4. How We Use Information

To provide the document analysis service
To process payments and grant credits via Stripe
To send analysis results by email when you use email-to-scan, and receipts when requested
To enforce per-device rate limits and prevent abuse
To improve the service using aggregated, de-identified analysis statistics (never individual documents)

We share data only with the service providers listed in our Subprocessor List, including:

Stripe — payment processing (Stripe's privacy policy applies)
AI model providers via LiteLLM — Google (Gemini) is the primary analysis model; Groq and OpenRouter are fallback providers used only when the primary is unavailable. Models from Anthropic are reachable only as an OpenRouter fallback route. Personally identifying information (names, addresses, SSN/TIN, email, phone) is masked in-process before text is transmitted. All inference providers are US-based and, under their API terms, do not train on the data.
Railway — application compute (United States)
Neon — Postgres database hosting (AWS us-west-2, Oregon)
CloudAMQP — hosted message queue for background analysis jobs
Resend — transactional email delivery (email-to-scan replies, receipts) and the waitlist audience
Sentry — error monitoring (no document content)
Cloudflare — website hosting (Pages), the waitlist worker and its KV store, Turnstile bot protection on forms, and email routing for the scan@ inbox
Google — Google Analytics 4 on the website (consent-gated) and Google Fonts

We do not sell, rent, or share your data with advertising networks or data brokers. For information on international data transfers, see our Data Processing Addendum.

6. Data Retention

Original document files: deleted within 30 seconds of upload
Extracted document text: deleted when the analysis finishes or fails; stale rows are scrubbed by an hourly sweep
Analysis results: kept until you delete them in the app or by request
Device records: deleted 24 months after the device's last activity (a scheduled purge is planned)
Payment records: retained for 7 years (tax and accounting requirement) and excluded from deletion requests
Email addresses: retained until you request deletion or unsubscribe

7. Your Rights

You may request:

Access / export: a copy of the data associated with your device UUID
Deletion: removal of your data from our systems (payment records required for tax and accounting are retained)
Correction: updates to incorrect information

You can exercise these rights in the app (Settings → Export my data or Delete my data) or by emailing privacy@paidwrite.app with your device UUID (shown in Settings).

8. Security

We use industry-standard security measures including:

TLS encryption for all data in transit
Encrypted database storage (Neon Postgres on AWS us-west-2)
Extracted text encrypted at rest for the short time it exists
Admin panel protected by multi-factor authentication (TOTP); every admin action is audit-logged
API keys and secrets stored in environment variables, never in code

9. Children's Privacy

PaidWrite is not intended for users under 18. We do not knowingly collect data from children.

10. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information (we do not sell or share personal information). To exercise these rights, use Settings → Export my data / Delete my data in the app or contact privacy@paidwrite.app.

11. Cookies and Local Storage

For details on cookies, local storage, and similar technologies used by PaidWrite, see our Cookie Policy.

12. Changes to This Policy

We will notify you of material changes by updating the "Last Updated" date and, where practical, with a notice in the app. Continued use of PaidWrite after changes constitutes acceptance.

13. Contact

Email: privacy@paidwrite.app
Mailing address: ContraForge LLC, 3870 La Sierra Avenue #1105, Riverside, CA 92505, USA