Privacy Policy

Our Privacy Commitment

at Ex-TerCo, we practice what we preach. We believe privacy is a fundamental right, and we've designed our service to protect yours. We don't collect personal data, we don't track you, and we don't sell your information.

What We Don't Collect

• No personal identification information
• No email addresses or account data
• No browsing history and no tracking cookies, on the site or in the extension
• No device fingerprinting
• No third-party analytics that identify users

What We Temporarily Process

• Terms & Conditions text you submit for analysis
• The company name associated with the T&C
• Analysis results and risk scores
• Timestamp of the analysis

None of this is linked to you. There is no account, no identifier and no record of who submitted what, and identical documents are recognized only by a hash of their text, so the same contract is not analyzed twice.

The Browser Extension

• Nothing leaves your browser until you click. The extension reads the page you are on to decide whether it looks like a contract and to light the toolbar badge, and that decision is made entirely on your device.
• When you click Analyze, it sends the legal text of that page. If the page is not the contract, it sends the address of the terms the page links to, or the company name, so we analyze the real agreement instead of marketing copy.
• Before any text is sent, it sends a fingerprint of that text, a SHA-256 hash, so a document that has already been analyzed comes back without the text being sent at all.
• If you rate a verdict with a thumbs up or down, it sends that rating and the id of the analysis. Nothing else, and nothing that identifies you.
• Your settings, the cached verdicts and the optional list of your last 10 analyses stay on your device. That list is off by default, and when it is on it records the site and the score, never the page title.

Why the extension asks for access to every site: a badge that can tell a contract from a checkout page can only do it by reading the page, and Chrome offers no narrower permission for that. The reading stays local and is never uploaded. The only thing that ever crosses the network is the document you asked us to analyze, at the moment you ask.

Data Retention

We keep analyzed T&C text and results for up to one year, and then delete or re-analyze them. The company analyses we research and publish are a public reference, so they stay for that year and are then refreshed or removed: terms change, and a year-old score should not be presented as if it were current. Nothing in that store identifies a person, because nothing that identifies a person was collected in the first place.

GDPR & CCPA Compliance

By design, Ex-TerCo is compliant with GDPR, CCPA, and other privacy regulations. Since we don't collect personal data, there's nothing to request, correct, or delete. Your privacy is protected by default.

Security Measures

• All data transmission is encrypted using TLS 1.3
• Analysis processing happens in isolated environments
• No data is ever shared with third parties
• Regular security audits and updates