Privacy

You upload employment contracts. They are the most sensitive thing you will give us, and the entire product is built on the assumption that no one else — including your employer — should ever see them. We do not sell your data, we do not advertise, and there are no tracking or analytics scripts on this site.

You can use an email address and a password, or your Google account. If you choose Google, we receive the basic profile Google returns for sign-in — your name, email address, profile picture and language — and Google learns that you signed in here. We never see your Google password.

That is the standard sign-in scope and nothing beyond it: no contacts, no calendar, no Drive, no email content. What Google returns is stored alongside your account.

Signing in with an email and password instead means Google is not involved at all.

• Your account. Email address, name, and — if you turn on two-factor authentication — the secret that makes your authenticator app work.
• Documents you upload. Contracts, offer letters and credential documents, plus the text extracted from them so they can be analysed.
• What we produce from them. Clause findings, negotiation strategy and draft replies.
• Credential details. Licence, DEA and board certification numbers and their expiry dates.
• Records of use. An audit log of security-relevant actions, and counts of how much analysis an account has run so we can control cost and abuse.

We do not ask for and do not want patient information. Nothing in this product is a place to put it.

• Every row of your data is fenced off at the database level, so one account cannot read another's even if the application asks it to.
• Licence and DEA numbers are encrypted before they are stored, with a key held outside the database, and revealing one is an action we record.
• Our error tracking is built as an allowlist: it receives error types and stack traces and is constructed so that request bodies, cookies, headers and contract text are never sent to it.
• Uploaded files are stored per-account and served only through signed, expiring links.

We use other companies to run the service. They are named here individually because “trusted partners” tells you nothing you can act on.

• CompanyWhat it does for usWhat it can see
• SupabaseFor: Database, file storage and sign-inCan see: Account details, documents, everything generated from them
• VercelFor: HostingCan see: Requests to the site as they are served
• AnthropicFor: The model that reads contracts and drafts repliesCan see: Contract text and recruiter messages you submit for analysis
• Voyage AIFor: Turns reference material into a searchable formCan see: Our own clause library, not your documents
• SentryFor: Error reportingCan see: Error types, stack traces and your account id — not request contents
• UpstashFor: Rate limitingCan see: Counts of requests per account
• ResendFor: Transactional emailCan see: Your email address and the message being sent
• GoogleFor: Signing in, if you choose to use itCan see: That you signed in here. In return we receive your name, email address, profile picture and language

We are working through formal data processing agreements with these companies and do not yet have them all in place. We would rather tell you that than imply otherwise.

We will also hand over information if the law requires it, and we will tell you when we are permitted to.

• Sell your information, or share it for anyone else's advertising.
• Show your contracts or their contents to an employer, recruiter or staffing firm.
• Run advertising, analytics or session-recording scripts on this site.

Email privacy@leveragehermd.com and ask, and we will export or delete your account and its documents.

We are telling you to email rather than pointing at a button because the self-serve version is not built yet. It is on the list before we open to physicians beyond the pilot, and until it exists a person handles the request.

Documents and analyses stay until you delete them or ask us to. Audit records are kept longer on purpose: they are how we could show who accessed what if that question ever needed answering.

If this policy changes in a way that affects what we do with what you have already given us, we will tell account holders directly rather than quietly changing the date at the top of this page.

privacy@leveragehermd.com