Privacy Notice

Who operates the service

Contract Uplift is operated by Anna Vincze, a natural person in Hungary, at 3412 Bogács, Wass Albert u. 2., Hungary. For privacy questions, contact privacy@contractuplift.com.

Contract Uplift is a B2B SaaS product. It helps teams track contractual price increases from calculation and review through notice, price application and first-invoice verification.

Information we handle

Depending on how you use the service, this can include:

• account, authentication and session information;
• workspace, membership and invitation information;
• customer contacts, contracts, pricing rules, uplift events and audit history;
• transactional email and minimum delivery information; and
• plan, entitlement and payment-provider reference information.

We do not store payment card details. Payments may be handled by the payment provider or Merchant of Record identified at checkout under its own terms.

How we use information

We use information to provide and secure the service, maintain workspace access, run the uplift workflow, send requested service messages, administer plans and payments, support customers, keep operational records and meet legal obligations. We do not send marketing emails at launch and we do not sell personal data.

Legal bases

When Contract Uplift acts as controller, it relies on performance of a contract or steps before entering one to provide account and service access and, where applicable, administer paid services. It also relies on legitimate interests for service security, abuse prevention, operational logging, service administration and reasonable support, and on legal obligations where records must be retained or processed to comply with applicable law. We do not use consent-based marketing or send marketing emails at launch.

Controller and processor roles

For its own account, authentication, billing, security, support and service-operation data, Anna Vincze / Contract Uplift acts as controller. When a business customer submits personal data about its customers, contacts, contracts or business operations through the service, Contract Uplift generally processes that data as processor on the customer’s documented instructions. The business customer remains responsible for its own obligations as controller, including determining its lawful basis. See our Data Processing Addendum for the practical V1 processing terms.

Providers

We use Cloudflare for hosting, Workers, D1 and related infrastructure; Google Firebase for authentication; Resend for transactional email; and a payment or Merchant-of-Record provider identified during checkout. For assisted data onboarding, Cloudflare Email Routing forwards messages sent to onboarding@contractuplift.com to the operator’s Google/Gmail mailbox infrastructure for receipt and holding.

Assisted data onboarding

Growth, Portfolio and Annual Uplift Run may include assisted data onboarding. You may send an existing spreadsheet or system export to the onboarding address. You are responsible for having authority to provide that information. Temporary onboarding working copies are kept for up to 7 days after onboarding; the original onboarding email and attachment are kept for up to 30 days after successful onboarding or confirmation, subject to necessary security or legal exceptions. Mailbox cleanup is an operational process.

Retention, export and deletion

Business data is retained while a workspace remains active. An account or workspace deletion request starts a 30-day recovery and export window. After that window, the service removes operational data and minimises retained audit, email-delivery and billing metadata. We retain this limited audit, email-delivery and billing metadata for up to 12 months after closure or deletion, unless longer retention is required by applicable law. Firebase provider identity deletion is a separate provider-side process. An application-side Firebase UID tombstone may remain until that cleanup is confirmed to prevent account recreation or session abuse.

Authenticated users can export their account data. Workspace owners can export workspace data. You may also contact us at privacy@contractuplift.com about privacy requests.

Analytics and browser storage

Contract Uplift uses a small aggregate Cloudflare Analytics Engine counter for event type, plan, billing interval and count. It does not intentionally store a visitor identifier, user ID, Firebase UID, email address, IP address, referrer, fingerprint, customer data or analytics cookie. See our Cookie & Storage Notice for the browser storage used by the service.

Your rights and contact

Depending on the circumstances and applicable law, individuals may have rights to access, rectification, erasure, restriction, objection and data portability. Requests can be sent to privacy@contractuplift.com, and individuals may lodge a complaint with the competent data-protection supervisory authority. We may need to verify identity and authority before responding. Contract Uplift does not use personal data for solely automated decision-making that produces legal or similarly significant effects. For product support, email support@contractuplift.com.