Privacy policy

Effective from: 13 October 2026

1. Controller

Synclex OÜ (registry code 17476899, Tallinn, Estonia) is the controller for contractreviewestonia.com. Contact, including for data protection: contact@lexforge.ee.

2. What we process and why

  • Contract text. We extract the text from your file and send it to an AI model for analysis. The file itself is not stored. Legal basis: performing the contract (you asked us to review it).
  • The analysis result (summary, findings and short clause quotes), kept so you can reopen your result and report from the link.
  • Payment data. Stripe processes payments; we never see or store card details. We receive the payment confirmation, amount, email and billing country. Legal basis: performing the contract and our accounting obligations.

3. Processors

  • Vercel Inc. (USA): hosting the website and handling requests.
  • Upstash, Inc. (USA): temporary storage of the analysis result (database).
  • Stripe Payments Europe, Ltd. (Ireland): payment processing and billing.

Data may be transferred outside the European Economic Area (USA, People’s Republic of China). If you do not want the contract text to leave the EU, do not upload a contract containing personal data, or remove that data before uploading.

4. How long we keep data

  • The uploaded file: not stored (processed in memory only).
  • A free result: deleted automatically after 24 hours.
  • A paid report and remediation pack: deleted automatically 90 days after payment.
  • Payment and invoice records: 7 years under the Estonian Accounting Act (at Stripe).
  • Withdrawal notices: 1 year.

5. Artificial intelligence

The analysis is produced by an AI model using a knowledge base of Estonian law. The result is generated automatically and is for information only; it is not legal advice and makes no decisions about you. We do not use your data to train models.

6. Your rights

You may access, correct or erase your data, restrict or object to its processing. Email contact@lexforge.ee with the result or report link and we will delete that analysis straight away. You can complain to the Estonian Data Protection Inspectorate.

7. Cookies and local storage

Analytics (PostHog, EU) uses a first-party cookie and browser storage to tell visits apart. We also store the source of your first visit (for example a campaign tag) in your browser. We use no advertising cookies or third-party ad networks. You can block cookies in your browser; the service still works.