Privacy Policy

Effective date: 26 April 2026

This Privacy Policy explains how Sefarai FZC LLC ("Sefarai", "we", "us"), a company registered in the Sharjah SPC Free Zone, United Arab Emirates, collects and uses information when you use the Mizan service available at mizan.sefarai.com(the "Service").

We aim to be straightforward: we collect the minimum data needed to operate the Service, we do not sell or share your data with advertisers, and we delete uploaded contracts as soon as they are analyzed.

1. Information We Collect

When you create an account and use the Service, we collect:

  • Account information — email address, full name, profile picture URL, and (if you sign in via Google) your Google account identifier. Stored in our authentication database.
  • Subscription tier — your current plan (Free, Professional, Business, or Enterprise).
  • Usage counters — the number of chat queries and contract analyses you have run in the current billing period, used to enforce plan limits.
  • Payment metadata — Stripe customer ID and subscription ID. Card details are handled directly by Stripe and never reach our servers.
  • Authentication cookies — strictly necessary cookies used to keep you signed in. We do not use advertising cookies.

2. Your Contracts and Conversations

  • The uploaded file itself is not kept. A contract PDF or image is written to a temporary file on the server, processed, and deleted as soon as the response is returned. The original file is never stored.
  • The analysis report is kept, so you can come back to it. Your past reports are listed in your account and include the clause text they were built from. They stay until you delete the report or your account.
  • Chat history is kept for the same reason. Your questions and our answers are stored against your account so a conversation can continue across sessions, and so an analysis-linked chat can refer back to the report.

Your contracts, reports and conversations are yours. We do not sell them, we do not use them to train our own models, and no other customer can see them. Access within our team is limited to what is needed to operate and support the Service.

3. How We Use Your Information

  • To create and authenticate your account.
  • To process your contract and chat requests in real time.
  • To enforce plan limits and bill subscriptions.
  • To respond to support enquiries you send to us.
  • To detect abuse and protect the security of the Service.

We do not use your information for advertising, do not profile you for marketing purposes, and do not sell your data to anyone.

4. Third-Party Services (Sub-Processors)

The Service relies on the following third parties, each of which receives only the data needed to perform its function:

  • DeepSeek. — generates the AI answers. It receives your chat questions and, when you upload a contract, the contract text and the individual clauses being assessed. Privacy policy.
  • OpenAI L.L.C. — two narrower roles: it converts text into the numeric vectors used to search the law library, and it reads scanned or image-only pages that contain no machine-readable text. For a scanned document that means an image of the page is sent. Per OpenAI's API data policy, this data is not used to train OpenAI's models. Privacy policy.
  • Langfuse GmbH. — records our AI requests and responses so we can debug incorrect answers and monitor quality. These records include the prompt text, which for a contract analysis includes clause text. Privacy policy.
  • Google LLC (Firebase Authentication). — manages sign-in, email verification and password reset. Your password is handled by Firebase and never reaches our servers. Privacy policy.
  • PostHog Inc. — product analytics: which pages are visited and which features are used, tied to your account identifier. Privacy policy.
  • Stripe, Inc. — processes subscription payments and stores card data on its own infrastructure. Privacy policy.

5. Data Retention

  • Account information and subscription metadata are retained for as long as your account exists, plus up to 90 days after deletion to satisfy financial-record obligations.
  • Usage counters are retained for the current billing period and rolled over.
  • The uploaded contract file is deleted as soon as the response is returned.
  • Analysis reports and chat history are retained for as long as your account exists, so that you can revisit them. Deleting your account deletes them.
  • We keep database backups for disaster recovery. A deleted report may persist in a backup until that backup is rotated out.

6. Your Rights

You can:

  • Request a copy of the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Withdraw consent and stop using the Service at any time.

To exercise any of these rights, email contact@sefarai.com from the address registered to your account. We will respond within 30 days.

7. Security

We use HTTPS for all traffic. Passwords are handled entirely by Firebase Authentication and never reach our servers, so we cannot see or recover them. Server-side access to the data infrastructure is restricted to authorized personnel. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

8. International Transfers

Our sub-processors operate servers outside the UAE. DeepSeek processes data in China; OpenAI, Stripe, Google and PostHog process data in the United States; Langfuse processes data in the European Union. By using the Service you consent to your information being transferred to and processed in those jurisdictions, subject to the protections each provider implements.

9. Children

The Service is intended for businesses and HR professionals and is not directed at individuals under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Policy from time to time. The effective date at the top of the page reflects the latest version. Material changes will be highlighted on the Service or sent to your account email where appropriate.

11. Contact

Sefarai FZC LLC
Sharjah SPC Free Zone, Sharjah, United Arab Emirates
Email: contact@sefarai.com
License No.: 4425991.01 · Formation No.: 4425991