Privacy Policy

1. What we collect

• Account data: the email you provide when creating an API key, and your key metadata (tier, quota usage).
• Scan inputs: URLs you submit and the fetched document text, stored so scans are reproducible and cacheable.
• Monitor data: URLs you ask us to watch, check history, and webhook endpoints you configure.
• Billing data: processed by our payment provider (Stripe). We never see or store full card numbers.
• Analytics: signup attribution source, product usage counts, and checkout funnel events (see §3).
• Operational logs: request metadata for security, abuse prevention, and debugging.

2. How we use it

To operate the service: run scans, enforce quotas, detect abuse, provide support, and process payments. We do not sell personal data. We do not use your scan inputs to train models.

3. Analytics

We measure how people find and use Fineprint so we can improve it. This is first-party product analytics only:

• Signup attribution: when you create an API key, we record an optional ref tag (for example ?ref=showhn on the signup link) so we know which channels bring people here.
• Product usage: scan counts, feature usage, and the timestamp of your first successful scan, used to measure activation and engagement.
• Billing funnel: whether a checkout session was started and completed, used to measure and fix payment drop-off.
• Site visits: when you load a page on our site, we record the page, an optional ref tag, and a hashed (not raw) IP address — used to measure launch traffic by channel. Raw IPs are never stored.
• API calls: when your key calls the API, we record the endpoint, HTTP status, and timestamp — used to measure usage and spot errors. Raw IPs are never stored.

What we do not do: we do not sell your data, we do not run third-party trackers or ad pixels on our pages, and we do not fingerprint your browser or device.

4. Publication

Scans are private by default. Published entries appear on the public leaderboard only after review by the Fineprint team, and show the vendor name, score, clauses, and manually verified quotes from the vendor's own public document.

5. Sharing

We share data only with infrastructure and payment providers needed to run the service, and when required by law. We will notify you of legal demands for your data unless prohibited.

AI processing: to scan a document, we transmit its text to our language-model providers (Anthropic and OpenAI, depending on configuration) solely to extract and classify its clauses. We send document text only — never your email address, account details, or billing information. We do not use your documents to train models, and both providers' API terms prohibit them from training on API inputs.

6. Retention

Scan reports are retained so past results stay reproducible; you may request deletion of your scans and account data at any time (see §8). Backups expire on a rolling basis.

7. Security

We apply industry-standard safeguards, but no system is perfectly secure. API keys are your credentials — keep them secret and rotate them if exposed.

8. Your rights

Request access, correction, export, or deletion of your personal data at fineprintcorp100@gmail.com We respond within 30 days.

9. Children

The service is not directed at children under 13, and we do not knowingly collect their data.

10. Changes

We will post material changes here 14 days before they take effect.