Privacy Policy &
Terms of Service

Coventis AI (“Coventis,” “we,” “our,” or “the Platform”) provides an artificial intelligence contract intelligence platform engineered for legal professionals, corporate counsels, commercial attorneys, and institutional law firms. We understand that documents processed through the Platform constitute privileged, sensitive, and business-critical client materials.

This Privacy Policy and Terms of Service (collectively, the “Agreement”) govern your access to and use of the Coventis AI website, APIs, review studio, playbooks, and related software services. By creating an account, uploading contracts, initiating a free trial, or subscribing, you agree to these terms.

We use your information strictly and exclusively to:

• Execute the contract review and clause deviation analysis requested by your workspace
• Authenticate your identity, enforce session tokens, and maintain Row-Level Security isolation
• Deliver exportable matter reports, redline recommendations, and matter history
• Enforce subscription review quotas and administer trial entitlements via Paddle
• Execute on-demand document deletion and complete account purge requests
• Fulfill statutory compliance obligations

We do not sell, rent, or commercialize customer data, and we never utilize customer data for targeted third-party advertising or behavioral tracking.

Security and confidentiality are fundamental to Coventis AI's infrastructure design:

• Encryption in Transit: All HTTP traffic and API calls are strictly mandated over TLS 1.3 with modern cryptographic cipher suites.
• Encryption at Rest: Database tables, matter metadata, and uploaded PDF documents are stored using 256-bit Advanced Encryption Standard (AES-256).
• Row-Level Security (RLS): Multi-tenant isolation is enforced at the database layer via PostgreSQL Row-Level Security policies tied to Supabase JWT authentication. Cross-tenant data access is programmatically impossible.

Coventis AI operates under enterprise API agreements with AI foundation providers (including Google Gemini Enterprise). Under these enterprise agreements:

• Document text transmitted for inference is processed transiently and discarded immediately after response generation
• Inference queries are completely excluded from foundational model training and human review pipelines
• Client privilege and confidentiality remain inviolate under strict commercial confidentiality obligations

Our revenue model is purely subscription software-as-a-service; we do not monetize data.

We partner with specialized, vetted infrastructure providers to operate Coventis AI. Each sub-processor is bound by data protection agreements consistent with GDPR Article 28 and institutional security standards:

You maintain complete sovereignty over your documents. Data retention is governed by customer choice:

• Active Workspace Storage: Uploaded contracts and analysis results remain in your account for historical reference until you choose to delete them.
• 1-Click Individual Matter Purge: Clicking “Delete Analysis” in your workspace immediately and irreversibly purges the analysis record, extracted clauses, original PDF, and highlighted PDF from active storage.
• 1-Click Account Purge: In Workspace Settings, clicking “Delete Account” immediately cancels active Paddle subscriptions, invalidates session tokens, and executes a complete cryptographic deletion of your workspace profile and all associated matter history.

Regardless of your geographical location, Coventis AI respects universal privacy rights:

• Right to Access: request a comprehensive export of your workspace records.
• Right to Erasure (“Right to be Forgotten”): permanently wipe your documents and account using self-serve tools or by contacting support.
• Right to Rectification: correct or update inaccurate account information.
• Right to Data Portability: export generated reports in PDF, DOCX, and JSON formats.
• Right to Restriction & Objection: restrict processing of personal information.

To exercise rights not fulfilled directly through self-serve workspace controls, contact our privacy team at [email protected]. Requests are verified and answered within statutory deadlines (maximum 30 days).

We recognize that contracts uploaded to Coventis AI may involve legal confidences subject to attorney-client privilege, work-product doctrine, or professional rules of conduct (e.g., ABA Model Rules of Professional Conduct, Rule 1.6 in the United States, and SRA Standards in the United Kingdom).

Coventis AI provides technological safeguards (AES-256 encryption, zero model training, RLS tenant isolation, and on-demand purge) designed to satisfy an attorney's duty of technological competence and reasonable care. However, licensed counsel retains the sole professional duty to evaluate whether utilizing third-party AI analysis complies with jurisdiction-specific ethical guidance and client engagement agreements.

For questions regarding billing, enterprise agreements, privacy compliance, or terms: