Privacy

The short version

Your commission plan text and the resulting analysis are automatically wiped from our database within 24 hours of your analysis completing. After that, we keep only an anonymous billing stub (a random ID, the date you paid, the jurisdiction code, and a status of deleted). You can also wipe your record immediately at any time from your result page.

What we collect

• Your email address (so we can deliver the analysis)
• The text of the commission plan you submit
• Optional context you choose to include (prior year plan, deals export, jurisdiction)
• Payment metadata from Stripe (we never see your card number)

How we use it

Solely to produce your analysis, deliver it to you, and operate the service. We do not sell your data and we do not share your plan with anyone outside Offer Letter Clarity / Misphat LLC.

Anonymized peer benchmarks (opt-in)

After your report is delivered, you may choose to contribute a small set of banded, anonymized fields to our peer-benchmark database. This is OFF by default and only happens if you explicitly check the box on your result page.

What we keep when you opt in: role family, stage, geography, banded dollar amounts (rounded to the nearest $25,000 in most cases), key clauses (presence and duration), and the risk score from your report. We do NOT keep your document, your name, your employer name, exact dollar amounts, exact dates, manager names, or any verbatim quote.

We display aggregate peer medians only when a peer slice has at least 25 anonymized contributions, so no individual contribution can be inferred from the displayed data.

You can revoke your contribution at any time from /my-contributions using your submission id. Revoked contributions are excluded from all future aggregates.

Retention & deletion

A scheduled cleanup job runs hourly and wipes the following fields from any row whose analysis completed more than 24 hours ago, or that was abandoned (paid but never analyzed) more than 24 hours ago:

• Your email address
• The plan text you submitted
• Any prior plan text or deals data you submitted
• The full analysis output
• The Stripe session ID

After cleanup, the row remains only as an anonymous stub for billing reconciliation: a random UUID, the timestamp you paid, your jurisdiction code, and the status deleted. There is nothing in the stub that identifies you or your plan.

You can also wipe your record immediately by clicking Delete my data now on your result page, or by emailing offer-letter-clarity@proton.me with your submission ID.

Subprocessors

• Vercel (hosting)
• Neon (Postgres database, US-East region)
• Cloudflare (DNS)
• Anthropic (analysis engine, we send your plan text in the prompt; Anthropic's API does not retain prompt data for training)
• Stripe (payments)
• Resend (transactional email delivery)

Your rights

If you are in the EU, UK, or California you have the right to access, correct, or delete your personal data. Because we automatically delete sensitive data within 24 hours, most of these requests are already handled by default. For anything else, contact offer-letter-clarity@proton.me.

Contact

offer-letter-clarity@proton.me
Misphat LLC