Privacy
This page explains what data Contract assurance and Polyglyph Analytica have, and where it goes.
Last updated 16 October 2026.
What stays on your computer
Your documents, and everything Contract assurance works out from them, stay on your computer. The contracts, orders, delivery records, invoices and bank records you drop in are kept in a folder called pramanik in your home folder, filed there by corner. Beside them, in the same folder, are the ledger of what was filed and why, the contract terms recorded, the reconciliation runs and their findings, and the record of what was done. Contract assurance's own settings, such as its installation id, the result of its last licence check and any paired phones, are in a folder called .pramanik in your home folder.
The dashboard is served by your own computer to your own computer. None of this is uploaded to us, and we have no copy of it to lose or to hand over.
What leaves your computer
- Licence checks. Contract assurance asks its licence server whether your copy is licensed, which version it is entitled to, whether this computer holds the seat and, during a trial, how many days are left. Each request carries your licence id, an installation id (a random number made when you install, not read from your hardware) and the version you run. The seat check runs at most once a day. Nothing about your documents or findings is in any of them. Each time Contract assurance checks its licence, it also tells our licence server whether your copy has been changed from the one we supplied: yes or no. It never sends what was changed, or any of your files. We keep the latest answer with your licence.
- Update downloads, from the same server, when a new version is ready.
- Your own mail server, if you add a mailbox. Contract assurance signs in to it with the password or token you gave it, over an encrypted connection, and downloads your new mail. It sends no mail. The password or token stays on your computer and is never sent to us.
- A certificate for the dashboard's secure local address, fetched from the same server with the same two ids. The address points back at your own computer, and traffic under it never leaves it.
- Your own Claude. Contracts, and any document Contract assurance cannot place on its own, are read by Claude when you ask it to. That happens in your own Claude session, under your Claude account and Anthropic's terms. It never passes through us.
- Your phone, if you pair one. A paired phone reaches your dashboard through our relay server. The connection is encrypted end to end, between your phone and your computer. It's checked by six digits that both screens show. So the relay passes it on without being able to read it, and keeps none of it. The relay's record is which licence a link belongs to and when it was last used.
- Notifications, if you turn them on. A push notification goes from your computer to your browser's push service, which is run by the company that makes your browser, such as Google, Apple or Mozilla. It passes it on to the dashboard, or the paired phone, you turned notifications on for. Each one is encrypted for that device, so the push service can't read it.
- Notification emails, if you choose email for a topic. Your computer asks our licence server to send one short email to the address on your licence. It says only which product, which topic and how many things are waiting, such as "Something needs you in Contract assurance (money)". It never has the details. You see those when you open Contract assurance. Our server sends it through ZeptoMail, our email service.
- Things you ask for from the dashboard. Moving the seat, asking for a refund or starting a trial sends the same ids to the licence server. Installing another Polyglyph Analytica plugin from the dashboard downloads it from that product's site, only when you ask.
What we hold
When you buy, Stripe processes the payment for us and passes us your email address and the order. With your licence we keep:
- that email address;
- the Checkout Session id and Stripe customer id Stripe gives us;
- which version of the checkout wording you agreed to, and when;
- the version you are entitled to, and the date your updates run to;
- which installation holds the seat, and when it last checked in;
- a record of any seat move, renewal or refund request.
A trial keeps less: an installation id and the date the trial started, with no name or email address.
We email you:
- the purchase email, with your download and refund link;
- a confirmation if you renew;
- a code when you move the seat;
- your download link again, if you ask for it;
- a short note when a new version ships with something to say.
Update notes go to everyone who holds a paid licence and aren't marketing.
For notification emails we keep a count of how many we sent for your licence each day, so we can stop at ten. If you use the link in one to stop a topic, we keep that choice. We keep nothing else about them.
We send marketing email only if you said yes to it, anywhere, for any of our products. The box to hear from us is ours, on our own page before checkout, and starts unticked. Saying yes means you agree to hear from Polyglyph Analytica about any of its products and apps, not only Contract assurance. It's one preference across all of them. You can withdraw it at any time, through the link in any marketing email or by writing to us. That stops marketing email from all of them.
Polyglyph Analytica keeps one customer list across all its apps, on our own servers. It holds who our customers are and what each chose about marketing.
Our processors are:
- Cloudflare, which hosts this site, the licence server and the relay;
- Stripe (Stripe Payments UK Ltd, with Stripe, Inc.), which processes the payment for us;
- ZeptoMail, which sends our email.
Stripe uses your name, email address, billing address and card details to take the payment, to work out the tax (from your billing address, and, for price previews in the US and Canada or where your country isn't known, your IP address) and to check for fraud. Stripe's privacy policy covers what it holds.
We use Stripe to send our invoices and take payments, by card or by bank transfer. Stripe keeps your name, email address, billing address and VAT number, and the invoices and payments, for us. For each invoice, we keep only Stripe's reference numbers, whether it is paid, and what it pays for. Your choice about news from us is kept by us, not by Stripe. You can ask Stripe about its own records of your payments.
Stripe may process your data in the United States. That transfer is covered by the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, and Stripe is certified under the EU-US, UK Extension and Swiss-US Data Privacy Frameworks.
If you write to us
Our support form, which the front page links to, sends your name, email address, the topic, any licence or invoice reference you give and your message to us by email, and that is where it stays. It emails you a ticket number. To stop the form being used to send spam, the server keeps a one-way hash of the sender's network address for ten minutes and then deletes it. Please don't send contracts or other documents through it. Contract assurance reads those on your own computer, and we have no need to see them.
This website
This site uses analytics cookies only if you say yes. If you press "Allow analytics" on the cookie notice, Google Analytics records which of our pages you visit. It also records the steps you take towards buying:
- seeing the prices;
- completing a purchase;
- starting a trial or a demo.
This is recorded without your name or email. We use it to learn which pages help. Nothing is used for advertising. If you don't say yes, no analytics runs at all.
Apart from analytics and the currency you choose (below), the site keeps two things in your own browser. One is whether you chose light or dark. The other is your answer to the cookie notice. Neither is sent anywhere. If you open the sample workspace, your browser also keeps that workspace and anything you add to it. It is not sent anywhere. To answer the cookie notice again, use "Cookie settings" at the bottom of every page.
To show prices in your currency, our sites use the country your connection comes from, which our hosting provider, Cloudflare, tells us. We don't store it. On a page that shows prices, you can change the currency at its foot, and your browser remembers your choice.
To show the price, the page asks our licence server, and the server asks our store. The prices come from our own price list. The store asks Stripe Tax what tax it will add. Our licence server tells the store which country your request comes from, and the store tells Stripe. If you're in the US or Canada, or the country isn't known, your IP address is passed on instead, so Stripe can work out where you are. We don't store your IP address for this. When you buy, our store at store.polyglyphanalytica.com sends you to Stripe's checkout to pay.
Our store
You buy at our store. Polyglyph Analytica runs it, as it runs this site.
The store has its own cookie notice. If you press "Allow analytics" there, Google Analytics records which store pages you visit, the links you follow from them, and when you open the checkout. It's recorded without your name or email. We use it to learn which pages help people buy. Nothing is used for advertising. Your answer on this site doesn't carry over to the store. If you don't say yes there, no analytics runs on the store.
When you pay, Stripe tells the store about the payment. The store keeps a copy of what Stripe sends: what you bought, the amounts and the tax, your name, email address and billing address, and any tax number you gave. For a refund, it can also include the card's type, its last four digits and its expiry date. It never includes the full card number. The store uses it to tell Contract assurance's licence server about your purchase, and later about a renewal or a refund. It keeps it with our purchase records.
If you ask the store for your price as a returning customer, it keeps your email address and when it last sent you the link, so it sends at most one every 15 minutes. If you open the price link, your browser keeps a cookie on the store's site for 30 days. It lets the store show your price as a returning customer. It's sent only to the store.
If you ask for an invoice, the store keeps what you typed with our sales records, to send the invoice and, once it's paid, what it pays for.
How long we keep it
We keep licence and purchase records for as long as the licence exists, and then for as long as tax law requires. For licence checks, we keep only the latest one for each installation. We keep messages you send us for as long as the conversation needs them. We keep your marketing consent until you withdraw it.
Your rights
Write to hello@polyglyphanalytica.com if you want to:
- ask for a copy of what we hold about you;
- have it corrected or deleted;
- object to its use;
- withdraw a consent.
When you ask us to erase your details and confirm it, we erase them from the records of every Polyglyph Analytica product you've used. We keep an invoice for as long as tax law says we must, and nothing else about you with it.
If you're unhappy with how we handle it, you can complain to the Information Commissioner's Office (ico.org.uk) or your own data protection authority.
The people named in your contracts and invoices are in your records, on your computer, and never reach us. You decide what happens to them.
Changes
If this policy changes, the date at the top changes with it.
Who you are dealing with
Polyglyph Analytica Ltd is the controller of the personal data this policy describes.
Contract assurance is made and sold by Polyglyph Analytica Ltd.Polyglyph Analytica Ltd, trading as Polyglyph Analytica
Registered in England and Wales, company number 17495579
hello@polyglyphanalytica.com
You buy from Polyglyph Analytica Ltd. Stripe processes the payment for us. It is not the seller. The charge on your statement is from POLYGLYPH.