Contrivo

• Arrow Left

Legal Notice

Responsible for the content is:
Benjamin Sommer
Postal address:
c/o IP-Management #5871
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email: [email protected]
Contact form: on the bottom of this website

There is currently no commercial activity.
A commercial version of the project is being developed.

For the management of mail sent to the above address, the services of IMPRESSUM-PRIVATSCHUTZ GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg, are used. This service provider offers a secure and reliable mailing address. This also constitutes my legitimate interest within the meaning of Art. 6(1)(f) of the GDPR. I have concluded a data processing agreement with Impressum-Privatschutz and fully comply with the requirements of the GDPR when using this service.

Contrivo

• Arrow Left

Privacy Policy

The protection of your data is taken very seriously.
This website does not collect any personal data unless you voluntarily provide it (e.g. by entering your email in the waitlist or contact form).Responsible:
Benjamin Sommer – [email protected]What is collected:
Website Analytics:
*This website uses Plausible Analytics, a privacy-friendly, cookie-free analytics service based in the EU.
*All data is aggregated and anonymous (e.g. number of visitors, referrers, which pages were viewed, etc.).
*The data cannot be used to identify you as an individual.
Email addresses provided:
*Via the waitlist form
*Via the contact form (to respond to your inquiry)
No cookies are used on this website.Joining the Waitlist:
If you join the waitlist, your email address is securely stored and managed via Kit (previously "ConvertKit") — a GDPR-compliant email service provider based in the United States.
*You can unsubscribe at any time sending a message to [email protected] or using the contact form below.Purpose of data processing:
*Measuring and improving the website (via Plausible Analytics)
*Notifiying you about product news
*Communicating with users who submit a requestLegal Basis:
*Art. 6(1)(a) GDPR – Consent (for email communication and contact form submissions)
*Art. 6(1)(f) GDPR – Legitimate Interests (for the use of Plausible Analytics, as only anonymous, aggregated data is processed to improve the website)Your rights:
In accordance with the GDPR, you have the right to (in this case the following applies to your email address):
*Access your data
*Correct or delete your data
*Restrict or object to data processing
*Withdraw your consent at any time (e.g. unsubscribe from emails)
*Lodge a complaintTo exercise these rights, contact:
[email protected] / or use the contact form below.

Contrivo

Terms of Service

Last updated: 20-June-20261. Introduction
These Terms of Service govern the use of the contract analysis and processing tool (“the Service”) operated by a single individual (“the Provider”). By accessing or using the Service, the user (“the User”) agrees to be legally bound by these Terms. Users who do not agree must refrain from using the Service.The Service provides automated processing, redaction, summarization, and analysis of documents using artificial intelligence technologies.The Service does not provide legal advice. The Service is a contract analysis and processing tool with an educational component.The Service is provided for informational purposes only and does not constitute legal advice, legal representation, or professional legal services. If you require legal advice or assistance regarding your specific circumstances, you should consult a qualified lawyer or other appropriate professional advisor.
____________________________2. Privacy Policy
The collection, processing, storage, and protection of personal data are governed by the Privacy Policy, which forms an integral part of these Terms of Service.By creating an account, uploading documents, or otherwise using the Service, the User acknowledges that they have read and understood the Privacy Policy.
____________________________3. Eligibility
The Service is intended for individuals who have the legal right to upload and process the documents they submit. By using the Service, the User confirms that:
• they have the authority to upload the relevant documents;
• they are not prohibited from using the Service under applicable law.
____________________________4. Description of the Service
The Service allows Users to upload documents (including contracts, agreements, legal texts, and related content). The Service uses automated AI systems to:
• extract text;
• redact information;
• analyze contractual content;
• generate summaries, clarifications, and explanations.The analysis is produced using third-party AI providers. According to the policies applicable to the Service at the time of processing, submitted contract data is not used for model training by those providers.The Provider does not guarantee accuracy, completeness, or legal correctness of the analysis.The Service is provided “as-is” and “as available.”
____________________________5. Beta Service
The Service may be provided as a beta, preview, or experimental offering.Features may change, be modified, contain errors, or be removed without notice. The Provider does not guarantee uninterrupted availability, completeness, performance, or compatibility of the Service during the beta period.Users acknowledge that beta services may contain inaccuracies, defects, or limitations that may not yet be fully resolved.
____________________________6. Usage Limits
The Provider may impose limits on uploads, analyses, storage, account activity, or other usage of the Service.Such limits may vary depending on the user's account type, subscription status, beta-testing phase, or other operational considerations.The Provider reserves the right to modify, introduce, or remove usage limits at any time in order to maintain the stability, security, and availability of the Service.
____________________________7. No Legal Advice
Outputs generated by the Service, including explanations, summaries, and clarifications, are for informational purposes only.The Service:
• is not a law firm,
• does not provide legal advice,
• should not be relied upon for legal decisions,
• should not replace consultation with a licensed attorney.The User remains solely responsible for any actions taken based on the Service’s output.
____________________________8. No Attorney-Client Relationship
Use of the Service does not create an attorney-client relationship, fiduciary relationship, or any other professional-client relationship between the User and the Provider.The Provider does not act as a lawyer, law firm, legal representative, insurance advisor, or other licensed professional advisor.
____________________________9. No Gurantee of Accuracy
While reasonable efforts are made to provide accurate and useful analyses, the Service relies on automated processing and artificial intelligence technologies.The Provider does not guarantee that any analysis, summary, explanation, or recommendation is complete, accurate, up-to-date, or free from errors.Users remain responsible for reviewing original documents and verifying important information independently.
____________________________10. User Responsibilities
The User agrees to:
• only upload documents they are legally permitted to upload;
• not upload harmful, malicious, or illegal content;
• not attempt to reverse engineer, disrupt, or misuse the Service;
• not violate the privacy or rights of third parties;
• comply with all applicable laws.The User retains full ownership of the documents they upload, as long as the respective documents contain personal identifiers.
____________________________11. Account Suspension and Termination
The Provider may suspend, restrict, or terminate a User's access to the Service if:
• the User violates these Terms;
• the User attempts to misuse, disrupt, or interfere with the Service;
• the User uploads unlawful, harmful, or malicious content;
• the Provider reasonably believes that continued access could create security, legal, or operational risks.The Provider may also suspend or discontinue the Service, in whole or in part, at any time during beta testing or service development.Where reasonably possible, the User will be notified of such actions.
____________________________12. Temporary Storage and Processing of Documents
When the User uploads a document, it is stored in a secure cloud environment for automated processing.Because automated redaction may vary depending on document structure which generally covers a wide scope of unique formatting styles there is the possibility that some documents will have partially redacted versions (“semi-redacted versions”). Those semi-redacted versions may be temporarily retained for up to 7 days to ensure safety, accuracy, and reliability of the redaction process.
These temporary files are turned into files with no personal identifiers within those 7 days and deleted right after this process.This processing is necessary to provide the Service and is performed under the Provider’s legitimate interest in ensuring the functionality and safety of the system.
____________________________13. Fully Anonymized Data
The Provider may, after removing all personal and identifiable information, create fully anonymized data for the purpose of:
• improving document redaction;
• developing future features;
• research and statistical analysis.Fully anonymized data contains no personal data and cannot be linked to the User.
GDPR and data protection laws do not apply to anonymized data.
____________________________14. Account Deletion
Users may delete their account at any time through the account settings interface.Upon account deletion:
• all personal data associated with the User is deleted;
• semi-redacted documents are anonymized within 7 days and then deleted.
____________________________15. Intellectual Property
The User retains ownership of all documents they upload.The Provider obtains only the limited rights necessary to process, analyze, redact, store, anonymize, and display uploaded content for the purpose of providing the Service.Following anonymization, the resulting anonymized data is no longer associated with an identifiable User. The User has no ownership rights in anonymized data and no right to request deletion once anonymization has been completed.All intellectual property rights in the Service, including:
• software,
• user interface,
• workflow logic,
• model configurations,
• branding,
remain the exclusive property of the Provider.The User receives a limited, non-exclusive right to use the Service for personal use.
____________________________16. Limitation of Liability
To the maximum extent permitted by law:
• The Provider is not liable for any indirect, incidental, consequential, or punitive damages.
• The Provider makes no warranty regarding the accuracy, reliability, or completeness of the Service outputs.
• The Provider is not liable for legal or financial decisions made based on AI analysis.
• The Service may experience outages, errors, or interruptions.The User uses the Service at their own discretion.
____________________________17. Service Modifications and Availability
The Provider may update, modify, suspend, or discontinue any part of the Service at any time, with or without notice.
____________________________18. Governing Law
These Terms are governed exclusively by the laws of Austria, without regard to conflict of law rules. Users accessing the Service from other jurisdictions are responsible for complying with all applicable local laws.____________________________19. Contact
For questions regarding these Terms, Users may contact:
[email protected]

Contrivo

Privacy Policy

Last updated: 20-June-20261. Introduction
This Privacy Policy explains how personal data is collected, processed, stored, and protected when using the contract analysis and processing tool (“the Service”), operated by an individual (“the Provider”).This Policy applies to all Users of the Service.The Service provides informational assistance only and may contain inaccuracies. No automated decisions producing legal effects or similarly significant effects on Users are made.Users remain solely responsible for any decisions taken based on the information provided by the Service. Users should independently review the underlying contract before making decisions based on the analysis.The Provider complies with the GDPR and applicable data protection laws.
____________________________2. Data Controller
The Provider acts as the Data Controller for all personal data processed through the Service.Contact email:
[email protected]
____________________________3. Categories of Data Collected
A. Data uploaded by the User
• Contracts and agreements
• Legal documents
• Any text or personal data contained within the above-mentioned document typesB. Account data
• Email address
• Password (hashed)
• Account preferencesC. Automatically collected data
• Timestamps related to actions such as account creation, login, uploads, and completed analyses.
• Usage logs such as page visits, amount of file uploads, the volume of text being processed per request, and user actions performed within the app.
• Error logs with technical details needed for diagnosing issues (never including contract content).D. User feedback data
• Product ratings voluntarily submitted through the Service
• Written feedback voluntarily provided by Users
• Metadata associated with feedback, such as timestamps and analysis IDs.When you use the Service, certain technical information is automatically transmitted by your device and processed as part of delivering a secure and functional web application. This includes:
• IP address and basic network metadata (processed by our hosting and security providers for security and operational purposes)
• Browser and device information (e.g., browser type, operating system)No unnecessary data is collected (principle of data minimization).
____________________________4. Purpose and Legal Basis of Processing
Personal data is processed for the following purposes:A. To provide the core Service (Contractual necessity – Art. 6(1)(b))
• Uploading documents
• Extracting text
• Redacting sensitive information
• Generating AI-based contract analysisB. To ensure safety and reliability of The Product (Legitimate interest – Art. 6(1)(f))
Automatically collected data is vital for the safety and reliability of the Service and is collected under legitimate interest.C. To ensure safety and reliability of redaction (Legitimate interest – Art. 6(1)(f))
The by default implemented automated redaction occassionally misses some sensitive information. To ensure only fully redacted (meaning anonymized) files are stored in the long-term, each file is reviewed manually within 7 days after the first document upload. In this time, the document will be turned into an anonymized document if it was not already.D. To comply with legal obligations (Art. 6(1)(c))
Where required by applicable law.E. To improve the Service through User feedback (Legitimate interest – Art. 6(1)(f))
The Provider collects the following data if voluntarily submitted by Users: survey responeses, ratings, and written feedback.
This information is used to:
• improve user experience and usability
• improve the quality of contract analyses
• identify missing or unclear information in the analysis results
• evaluate new features and product improvements
Feedback is analyzed only for product improvement purposes and is not sold for marketing purposes.F. To improve the Service via anonymized data (Outside GDPR scope)
After all personal data is irreversibly removed, anonymized versions are retained for:
• improving internal analysis system
• improving extraction quality
• improving redaction quality
• analytics
• research and developmentThese anonymized files contain no personal data and cannot identify any User.
____________________________5. Retention Periods
Data Type | Retention Period
• Raw uploads | For the duration of the analysis process
• Automatically redacted versions | Up to 7 days (fully anonymized within those 7 days)
• Account data | Until account deletion
• Feedback data | 24 months after submission
• Anonymized data | Indefinite (not personal data)
____________________________6. How Uploaded Documents Are Processed (Abstracted Explanation)
When the User uploads a document to the Service, the following steps occur:a. Secure Upload
The document is uploaded through an encrypted connection to a secure cloud storage location controlled by The Provider.b. Raw Document
The raw document file which is uploaded by the User is stored for the duration of the analysis only and immediately deleted once the analysis process has finished. This process is implemented to reduce the risk of sensitive information leaks.c. Automated Text Extraction and Redaction
The Service automatically extracts text from the document and attempts to remove sensitive information such as names, addresses, contact details, and identification numbers. Because document formatting varies strongly depending on the contract issuer, the initial redaction process may occasionally miss some sensitive information within an uploaded document. To ensure a high level of safety step “d. Temporary Storage” is implemented.d. Temporary Storage (Up to 7 Days)
Following the automated redaction process during the analysis step, it is possible that the file is partially redacted. This file version will be retained for up to seven (7) days. This temporary retention period allows manual anonymization measures to be applied to files where necessary. After this process the files will be fully anonymized, if they were not already. Anonymized documents cannot be linked back to an identifiable individual, because personal identifiers have been removed.e. AI-Based Analysis
The extracted text is sent, through encrypted connections, to third-party AI providers for the sole purpose of generating explanations, summaries, or clarifications requested by The User. AI-generated outputs may contain inaccuracies, omissions, or misunderstandings of the uploaded document.f. Display of Insights
The User will be provided with AI-powered insights of the uploaded contract via the user interface provided by The Provider.g. Use of Anonymized Data
Anonymized data contains no identifiable information and may be used to improve The Service. Anonymized data is not subject to GDPR.This explanation is provided in accordance with Articles 12–14 of the GDPR.
____________________________7. Sharing with Third-Party Service Providers (Sub-Processors)
The Service uses reputable third-party service providers (“sub-processors”) to deliver, secure, and improve performance. These providers process personal data solely according to Data Processing Agreements.Categories of providers include:
• Webhosting and User Interface providers (to provide access to The Service)
• Cloud hosting and storage providers (for temporary file storage)
• Document processing providers (e.g., redaction)
• AI model providers (for contract analysis and summarization)
• Infrastructure and orchestration providers (for backend workflows)
• Payment processors (for managing subscriptions) [in the launch version not needed]
• Analytics and error-tracking providers (If I do add analytics tools, then GDPR requires: Disclosure of these providers in my Privacy Policy ; User consent for non-essential cookies (like Google Analytics) ; Possibly a cookie banner.Sub-Processors Used
• Bubble – webhosting, application functionality, account storage
• Google Cloud Platform – storage, compute infrastrucutre
• Google AI – redaction
• Anthropic – text analysis
• Make.com – backend orchestrationGoogle AI
Google AI does not use customer content submitted through its services to train its models.Anthropic
Before text is transmitted to Anthropic, the Service applies automated redaction measures designed to remove personal identifiers and other sensitive information. Due to variations in document formatting and content, the redaction process may occasionally fail to remove all personal information. As a result, partially redacted text may in some cases be transmitted to Anthropic for analysis.According to Anthropic's commercial API documentation and terms in effect at the time of writing, customer API inputs and outputs are not used for model training by default.When text is processed by the third-party AI provider, that provider may temporarily retain submitted data in accordance with their own retention and security policies. Anthropic may retain API inputs and outputs for up to 30 days for security, abuse prevention, or legal compliance purposes.For all Sub-Processors
Where personal data is transferred outside the European Economic Area (EEA), the Provider relies on appropriate safeguards, including Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework where applicable, or other GDPR-compliant transfer mechanisms.
____________________________8. Data Security
The Provider implements strong technical and organizational measures, including:
• Encryption in transit (HTTPS)
• Encryption at rest. Even for temporarily stored documents.
• Short-lived signed URLs for file transfers
• Strict access controls
• Data minimization for personal data
• Regular deletion of temporary files
• Only temporary storage of sensitive contract text
• No storage of contract text in the main database
• Anonymization pipeline
____________________________9. Cookies
The Provider uses only strictly necessary cookies required for the operation of The Service, such as:
• session cookies to keep The User logged in
• security cookies (e.g., CSRF protection)
• preference cookies (e.g., language settings)The Provider does not use analytics, advertising, or tracking cookies. Because The Provider uses only essential cookies, a cookie banner or consent mechanism is not required.
____________________________10. User Rights (GDPR Articles 12–23)
The User has the right to:
• Access their personal data
• Correct inaccurate data
• Delete their data ("right to be forgotten")
• Withdraw consent at any time, where processing is based on consent
• Restrict processing of personal data
• Request data export
• Object to legitimate interest processing
• Lodge a complaint with the Austrian Data Protection AuthorityTo exercise these rights, the User may contact:
[email protected]Requests will be answered within the legally required period, which is one month.
____________________________11. Account Deletion
When a User deletes their account:
• all personal identifiers (e.g. email address) are deleted
• all other non-anonymized information (e.g. analysis results) are deleted
• anonymized data is retained (cannot identify the User)Measures are applied to remove personal identifiers and prevent identification of individuals. If a User deletes their account or an uploaded contract before the seven-day anonymization period has expired, which begins with the upload of the contract, the same anonymization and deletion process will be completed within a seven-day period starting from the time of deletion.
____________________________12. International Transfers
Some service providers may process data outside the European Economic Area. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are used.
____________________________13. Data Processing Agreement (DPA)
For users who act as data controllers under the GDPR and require a Data Processing Agreement, The Provider makes the DPA available upon request. The DPA describes how The Provider processes personal data on The User’s behalf and the safeguards that are applied when using sub-processors such as Google, Anthropic, etc.To request a copy of the DPA, contact: [email protected]
____________________________14. Changes to This Privacy Policy
The Provider may update this privacy policy occasionally.
Material changes will be notified through The Service.
____________________________15. Contact
For any privacy-related questions or requests:
[email protected]