Legal
Privacy Policy
Last updated: April 12, 2026
Effective Date: April 12, 2026
Operator: BeforeJD LLC, a Texas limited liability company
BeforeJD LLC ("BeforeJD," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices you have. This policy applies to the beforejd.ai website and all associated Services.
1. Information We Collect
1.1 Account Information. When you register for an account, we collect your name, email address, account credentials (hashed password or OAuth token), and account creation date.
1.2 Payment Information. Payments are processed by Stripe, Inc. BeforeJD receives and stores only transaction metadata (amount, date, scan tier) and the last four digits of your payment card. Full card numbers are never transmitted to or stored on BeforeJD systems.
1.3 Uploaded Documents. When you submit a document for analysis, we receive and temporarily process the document text. By default, Uploaded Documents are not stored after analysis completion. If you opt into temporary document storage, documents are encrypted and stored for your elected period (default 7 days) and then automatically deleted.
1.4 Analysis Output. Structured Analysis Output generated for your Uploaded Documents is associated with your account and retained so that you can access your scan history. You may delete individual analyses through your account dashboard.
1.5 Usage Data. We collect information about how you interact with the Services, including pages visited, features used, scan counts, timestamps, and click events. This data is collected via PostHog (our analytics provider) and is used to improve the Services.
1.6 Log Data. Our hosting infrastructure (Vercel) automatically collects server logs including IP addresses, browser type, operating system, referring URLs, and request timestamps for security, debugging, and performance monitoring.
1.7 Communications. If you contact us by email or through support channels, we retain those communications and your contact information to respond to your inquiry and to improve our support.
1.8 Cookies and Similar Technologies. We use session cookies and local storage to maintain authentication state and preferences. We do not use third-party advertising cookies or behavioral tracking cookies. You can manage cookie preferences through your browser settings; disabling cookies may affect your ability to log in.
2. How We Use Your Information
We use the information described above for the following purposes:
- To provide, operate, and improve the Services, including processing your documents through our multi-model AI analysis pipeline;
- To authenticate your identity and maintain your account;
- To process payments and maintain transaction records;
- To send transactional emails, including analysis completion notifications and receipts, via Resend (our email delivery provider);
- To analyze usage patterns and product performance using aggregated and anonymized data;
- To detect, prevent, and respond to fraud, abuse, security incidents, and violations of these Terms;
- To comply with applicable legal obligations, respond to lawful requests, and protect BeforeJD's legal rights;
- To communicate with you about material changes to our Terms or Privacy Policy.
We do not use your information to train our AI models, nor do we sell, rent, or share your information for third-party advertising purposes.
Quality Assurance Monitoring
BeforeJD sends a blind copy of each analysis delivery email to an internal quality assurance address ([email protected]) for the sole purpose of reviewing analysis outputs and ensuring product quality. These copies contain the same attachments delivered to you. They are retained for no more than 90 days from the date of receipt, after which they are permanently and irreversibly destroyed. These copies are never shared with third parties and are accessed only by BeforeJD personnel responsible for quality review.
Anonymized Internal Use
We may de-identify and anonymize analysis inputs and outputs for the purpose of internal product development, model evaluation, and quality benchmarking. This removes all personally identifiable information, party names, contract values, and any other identifying details. Anonymized data does not identify you or your contracts and is never sold, licensed, or shared with third parties.
3. Third-Party AI Processing
The core analytical function of the Services requires transmitting Uploaded Document text to one or more third-party artificial intelligence service providers ("AI Processing Partners") for model inference. BeforeJD currently uses three AI Processing Partners: OpenAI (ChatGPT), Anthropic (Claude), and xAI (Grok). Contract text is transmitted to these services solely for the purpose of generating the user's analysis report. No provider uses submitted contract data for model training. Users may review each provider's privacy practices at openai.com/privacy, anthropic.com/privacy, and x.ai/privacy. The identity and combination of AI Processing Partners may change over time as BeforeJD updates its analytical pipeline.
By submitting a document for analysis, you acknowledge and consent to the transmission of your Uploaded Document text to AI Processing Partners for the sole purpose of generating your Analysis Output.
BeforeJD enters into data processing agreements with AI Processing Partners and selects providers whose commercial API terms include provisions against using submitted API inputs to train their models by default. However, BeforeJD does not control, and cannot guarantee, the data handling practices of third-party providers.
You should not submit documents containing information that you are prohibited from disclosing to third-party AI processing services under any confidentiality obligation, professional privilege, trade secret protection, or applicable law. If you have concerns about a specific document's sensitivity, consult a licensed attorney before submitting.
Each transmission is governed by the applicable terms and privacy policies of the relevant AI Processing Partner. By using the Services, you accept the risk that third-party AI Processing Partners may update their data handling policies, and you agree that BeforeJD's liability is limited as set forth in the Terms of Use.
4. Service Providers
BeforeJD engages third-party service providers to support the operation, hosting, security, and delivery of the Services (collectively, "Service Providers"). Service Providers are contractually bound to use your information only as directed by BeforeJD, solely for the purpose of providing their respective services, and may not use your information for their own independent purposes.
BeforeJD uses Service Providers in the following functional categories:
| Category | Function |
|---|---|
| Database and Storage | Persistent storage of account data, analysis results, and (when opted in) encrypted document storage |
| Application Hosting and Compute | Serving the web application, executing serverless analysis functions, and delivering static assets |
| Payment Processing | Accepting and processing payments; BeforeJD receives only transaction metadata and does not store full card numbers |
| Email Delivery | Sending transactional emails including analysis completion notifications, receipts, and account communications |
| Product Analytics | Collecting anonymized usage events and product performance metrics to improve the Services |
| Business Banking | Processing business financial transactions; receives no user personal data |
| Authentication Infrastructure | Managing account login, session tokens, and multi-factor authentication |
BeforeJD may add, replace, or remove Service Providers at any time without prior notice, provided that any replacement Service Provider is subject to contractual obligations at least as protective as those described above. The identity of specific Service Providers is available upon request by emailing [email protected].
5. Disclosure of Information
We do not sell or rent your personal information. We may disclose your information in the following circumstances:
- Legal compliance: When required by subpoena, court order, or other valid legal process, or when we believe in good faith that disclosure is necessary to comply with applicable law or protect rights, property, or safety.
- Business transaction: If BeforeJD is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- Enforcement: To enforce these Terms, detect or prevent fraud or abuse, or protect the security of the Services.
- Consent: For any other purpose with your explicit consent.
6. Data Retention
| Data Type | Default Retention |
|---|---|
| Account information | Until account deletion |
| Analysis Output (scan results) | Until you delete individual scans or your account |
| Uploaded Documents (opt-in storage) | Your selected period, maximum 7 days; auto-deleted |
| Uploaded Documents (default / no opt-in) | Deleted upon completion of analysis pipeline |
| Payment transaction metadata | 7 years (financial record-keeping requirements) |
| Server logs | 30 days rolling |
| Support communications | 3 years from last contact |
| QA monitoring copies ([email protected]) | 90 days from receipt; permanently destroyed after 90 days; never shared externally |
When you delete your account, we will delete or anonymize your personal information within 30 days, except where required for legal or compliance purposes.
7. Your Rights and Choices
Depending on your state of residence, you may have the following rights with respect to your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate personal information.
- Deletion: Request that we delete your personal information, subject to legal retention requirements.
- Portability: Request that we provide your data in a portable format.
- Opt-out of model training: BeforeJD does not train AI models on your data by default.
To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 45 days. We may request verification of your identity before fulfilling your request.
You can also manage many of these choices directly in your account settings, including deleting individual analyses, deleting stored documents, and deleting your account.
8. Security
BeforeJD implements commercially reasonable safeguards to protect your personal information, including server-side encryption of stored documents (AES-256 at rest), encrypted transmission (TLS 1.2 or higher), row-level database security policies, authentication via Supabase Auth with support for MFA, and automated document deletion at retention period expiration.
No security system is impenetrable. We cannot guarantee absolute security, and we are not responsible for unauthorized access resulting from circumstances beyond our reasonable control. Please notify us immediately at [email protected] if you believe your account has been compromised.
9. Children's Privacy
The Services are not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly.
10. U.S. State-Specific Disclosures
California (CCPA/CPRA): BeforeJD does not "sell" or "share" personal information for cross-contextual behavioral advertising as those terms are defined under California law. California residents may submit rights requests as described in Section 7.
Texas (TDPSA) and Other State Laws: We honor applicable privacy rights under applicable U.S. state privacy laws. BeforeJD does not process sensitive personal information for purposes of inferring characteristics about individuals.
11. International Users
BeforeJD's Services are operated from the United States and are intended for users in the United States. If you are accessing the Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Services, you consent to this transfer.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or Site notification at least fourteen (14) days before taking effect. Continued use of the Services after the effective date constitutes acceptance of the revised policy.
13. Contact Us
For privacy-related questions, requests, or concerns:
BeforeJD LLC
Email: [email protected]
Website: beforejd.ai