Privacy Policy

Last updated: January 21, 2026

1. Information We Collect

We collect information you provide directly, including:

  • Account information (name, email address)
  • Documents you upload for analysis
  • Payment information (processed securely by our payment provider)
  • Communications with our support team
  • Usage data and interaction with our services

We automatically collect certain technical information:

  • Device type and operating system
  • Browser type and version
  • IP address and general location
  • Pages visited and features used

2. How We Use Your Information

Your information is used to:

  • Provide document analysis and monitoring services
  • Send important notifications about your documents
  • Process payments and maintain your account
  • Respond to your support requests
  • Improve and optimize our services
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

3. AI Processing and Document Analysis

Provisio uses artificial intelligence to analyze your documents and extract key information. Here's how we handle this:

  • Your documents are processed by third-party AI services to extract dates, obligations, and other relevant information
  • We do not use your documents to train AI models without your explicit consent
  • AI-extracted information is stored in your account and subject to the same security protections as your documents
  • You can request human review of any AI-generated analysis

4. Document Security

We take the security of your documents seriously:

  • Documents are encrypted at rest and in transit using 256-bit AES encryption
  • We implement strict access controls and regularly audit our security practices
  • Documents are stored in secure cloud infrastructure with redundant backups
  • You maintain full ownership of your content at all times
  • Our staff only access documents when necessary to provide support at your request

5. Third-Party Services

We work with trusted third-party services to provide our platform:

  • Cloud Infrastructure: We use secure cloud providers to store and process your data
  • AI Services: Third-party AI providers process documents for analysis
  • Payment Processing: Secure payment providers handle billing information
  • Email Services: Third-party providers deliver notifications and communications
  • Analytics: We use analytics tools to understand how our service is used

All third-party providers are contractually bound to protect your data and use it only for the purposes we specify.

6. Cookies and Tracking

We use cookies to:

  • Keep you signed in to your account
  • Remember your preferences
  • Understand how you use our service
  • Improve performance and user experience

You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

7. Data Sharing

We do not sell your personal information. We may share data in these limited circumstances:

  • With service providers who help us operate our platform
  • When required by law or legal process
  • To protect rights, safety, or property
  • In connection with a merger, acquisition, or sale of assets (you would be notified)
  • With your consent

8. Data Retention

We retain your documents and account data for as long as your account is active. Upon account deletion:

  • Your documents are permanently deleted within 30 days
  • Account information is removed from active systems
  • Some data may be retained in backups for up to 90 days
  • Certain information may be retained longer for legal or compliance purposes

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses and compliance with applicable data protection laws. By using Provisio, you consent to the transfer of your information to Canada and other countries where we operate.

10. Your Rights

Depending on your location, you may have the right to:

  • Access your personal information
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your documents at any time
  • Opt out of marketing communications
  • Object to certain processing activities
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us and select "Security" as the category.

11. California Privacy Rights

California residents have additional rights under the CCPA:

  • Right to know what personal information is collected and how it's used
  • Right to delete personal information
  • Right to opt out of the sale of personal information
  • Right to non-discrimination for exercising privacy rights

We do not sell personal information as defined by the CCPA.

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, our legal bases for processing include:

  • Contract: Processing necessary to provide our services
  • Legitimate Interests: Improving our services, fraud prevention, security
  • Consent: Marketing communications and certain optional features
  • Legal Obligation: Compliance with applicable laws

13. Children's Privacy

Provisio is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete that information.

14. Security Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will include the nature of the breach, affected data, and steps we are taking to address it.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of Provisio after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related inquiries or to exercise your rights, contact us through our form and select "Security" as the category.

We aim to respond to all privacy requests within 30 days.