Privacy Policy

1. What We Collect

We collect:

• Contact information you provide (name, work email, company name, WhatsApp number).
• The contracts, billing statements, and related documents you upload for analysis.
• Account information (email, hashed password) if you create an account.
• Usage data (pages visited, actions taken in the dashboard) needed to operate and improve the Service.

2. How We Use It

We use your information to: analyze the documents you upload and generate findings; send you your audit results, deadline reminders, and task notifications by email (and WhatsApp, where enabled); operate your account and your company's team; process payment for paid subscriptions; and follow up about the Service, including by email, if you request a free Discovery Audit. You can unsubscribe from marketing emails at any time using the link in those emails.

3. AI Processing of Your Documents

When you upload a document, its content is sent to Anthropic's Claude API to be read and analyzed. We do not use your documents to train any AI model, ours or anyone else's. Anthropic processes this content as our service provider under their own data-handling commitments, solely to return the analysis back to us for your account.

4. Who We Share Data With

We use the following service providers ("sub-processors") to operate OilStrikeAI. Each only receives the data it needs to perform its function:

• Supabase — database, authentication, and file storage.
• Anthropic — AI analysis of uploaded documents.
• Vercel — application hosting.
• Resend — transactional email delivery (reminders, notifications).
• Stripe — payment processing for paid subscriptions. We never see or store your full card number.

We do not sell your personal data or your documents to anyone, and we do not share them with third parties for their own marketing purposes.

5. Data Security

Your data is encrypted in transit (HTTPS/TLS) and at rest. Access within our own system is restricted using per-company data isolation (Row Level Security) so that one company's account can never see another's documents or findings, even in the event of an application bug.

6. Data Retention

We retain your account data and documents for as long as your account is active. If you close your account, we will delete your data within a reasonable period, except where we are required to retain records (for example, billing records) by law.

7. Your Rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and associated data, by emailing hello@oilstrikeai.com. We will respond within a reasonable time.

8. Cookies

We use only the minimal cookies necessary to keep you securely logged in. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect data from anyone under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect.

11. Contact

Questions about this Privacy Policy can be sent to hello@oilstrikeai.com.