Privacy Policy

Last updated November 7, 2026.

What you submit

When you run an analysis, Dilucera processes the text you paste and any contract photo or PDF you attach. That material can include confidential business information and personal data that appears in the document.

If you save a deal, the signed-in account stores the client name, deal title, stage, inquiry text, the AI review, the readiness checklist, the three strategy replies, pricing numbers you enter, follow-up notes, and proposal versions. A public proposal link stores the proposal text and records a link open or a typed acceptance or decline. The typed name is consent for that version. It is not a certified electronic signature.

Attachment files are not stored in the deal record. The record can keep the file name, type, and size. The image or PDF is sent for the review you request and is not kept as a contract archive.

Dictation in the iOS app asks iOS for on-device speech recognition. If that is unavailable, dictation stops. Browser dictation uses the browser’s speech recognition and may send audio to the browser vendor. A follow-up reminder is scheduled on the phone. It is not sent to the client. Deleting the account cancels Dilucera follow-up reminders still scheduled on that phone.

AI providers

Before the first analysis, the app asks for your permission. If you agree, the document or message is sent to Dilucera’s analysis service, which forwards it to Anthropic, a third-party AI provider, solely to produce the risk review and negotiation guidance you requested.

Your documents are not sold. They are not used for advertising. The app does not send a document to the AI provider until you have agreed.

Service providers

The signed-in account stores the client name, deal, inquiry text, AI review, strategies, pricing, follow-up note, and proposal. It also stores the analysis usage record used for the monthly limit. RevenueCat checks whether an Apple subscription is active. Apple processes the subscription payment. Dilucera does not receive your full payment card number.

A complimentary scan is not offered until the request can be verified on the server. The app does not send a hardware identifier as proof of identity, and it does not build an advertising profile.

Retention

A saved review is stored with the deal for the signed-in account. It is not kept only in temporary memory. The current session can also keep a copy so you can reread it. A proposal PDF created in the app cache is removed after the server confirms account deletion, when this device still has that file location. A PDF you saved or shared outside the app remains until you delete it. Photos you pick may remain in the operating system’s temporary files.

A saved deal remains until the account is deleted. Separately, the text of a request that reached the analysis service may remain available for up to 24 hours so the same signed-in user can retrieve an interrupted request. That temporary copy is not the saved deal. Expired request text is removed when the server next runs reservation maintenance. In this version, that maintenance runs as part of a later reservation. It is not a separate scheduled job. Account deletion removes the saved deal and saved review text immediately and does not wait for maintenance. The original contract file is not stored as an archive.

Usage records keep token counts and cost estimates. While the account is open, they can also keep a document fingerprint, which is a hash of the submitted text and file, not a copy of the document. After account deletion, the fingerprint and account id are removed. Amounts, dates, and reservation status can remain so a monthly attempt limit and the financial record can still be enforced. Cost figures in those records are estimates, not a provider invoice.

Deletion

Settings includes Delete account for the sign-in that is already on this device. After you confirm, the app asks Dilucera’s server to delete that sign-in account, saved review text, and document fingerprints. A new anonymous account is not created in order to delete an older one. If this device no longer has the original sign-in, deletion is not started. For help, email support@dilucera.com. Writing to that address does not restore a deleted account or recover a sign-in that is no longer on this device.

Usage amounts, dates, and reservation status can remain so the financial record stays intact, without the document, fingerprint, or account id. The subscription ownership id used to keep one monthly quota on that subscription is removed at the same time. Quota already consumed stays on the subscription record and is not given to another account. After the server deletes the sign-in account, it removes the stored closed-account id. A review that was already in progress cannot save its text after deletion.

This device tells you the account was deleted only when the server reports that the sign-in account was deleted. If the server cannot be reached, or the sign-in account is still open, the account has not been deleted. Removing the app does not by itself delete the server record.

Deleting the account does not cancel the Apple subscription. Cancel that subscription in Apple ID settings. After the sign-in account is deleted, the server asks RevenueCat to delete the customer identified by this sign-in when the server holds the RevenueCat secret. The app does not send that secret. If that request fails, the server tries once more in the same deletion. If RevenueCat deletion is still not confirmed, RevenueCat may keep the app user id and purchase history. That record is not a copy of your contract. If this device cannot finish signing out after the server deletes the account, close and reopen Dilucera before starting another review.

Expired review text is not removed by a separate schedule in this version. It is removed when reservation maintenance next runs, or immediately when account deletion succeeds.

Children

Dilucera is a business tool and is not directed at children under 13.