Stipulate

Privacy Policy

Effective date: October 7, 2026  ·  Stipulate Technologies, Inc.

1. Who we are and what this covers

Stipulate Technologies, Inc. ("Stipulate," "we," or "us") operates the Stipulate platform, a B2B software service for commercial accounts-receivable analysis. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with the Service.

Stipulate is a business-to-business platform. The information we process relates primarily to the businesses and professionals who license the Service ("Licensees"), not to the end-consumers or debtors in the underlying accounts. If you are an individual whose information appears in a document submitted to Stipulate by one of our Licensees, please contact the Licensee directly — they are the data controller for that content.

2. Information we collect

Account information Email address and password (stored hashed) when you create an account. We do not collect your name, phone number, or mailing address unless you provide it voluntarily through a contact form.
Billing information Payment information is collected and stored by Stripe, Inc., our payment processor. Stipulate receives a Stripe customer identifier and subscription status — not card numbers or bank account details.
Documents and data you submit Agreements, invoices, and other documents you upload or submit to the analysis engine. These are processed to deliver the Service and retained as described in Section 5.
Usage information Logs of API calls, including timestamp, route, response status, and anonymized account identifier. No request body content is retained in logs.
Device and connection data IP address, browser type, and referring page when you access the site. Collected by our hosting infrastructure (Vercel) in standard server logs.

3. How we use information

We use the information we collect to: (a) provide, operate, and maintain the Service; (b) authenticate users and enforce access controls; (c) process subscription payments and communicate about billing; (d) respond to support requests and inquiries; (e) improve the accuracy and coverage of the analysis engine, using aggregated and de-identified data; and (f) comply with applicable law and protect the rights of Stipulate and its Licensees.

We do not use submitted documents to train general-purpose machine learning models for sale to third parties. Analysis of submitted content is performed to generate findings for the submitting Licensee only.

4. How we share information

Stipulate does not sell personal information. We share information only as follows.

Service providers Supabase (database and authentication), Stripe (payment processing), and Vercel (hosting and edge compute). Each acts as a data processor under contract and processes information only as directed to provide the Service.
Legal requirements We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Stipulate, our Licensees, or the public.
Business transfers In the event of a merger, acquisition, or sale of assets, account information may be transferred as part of the transaction. Licensees will be notified via email before any such transfer takes effect.

5. Data retention

Account information is retained for the life of the account and for a reasonable period thereafter to comply with legal obligations and resolve disputes. Documents and analysis results submitted to the engine are retained as needed to provide the Service and are subject to deletion on request or upon account termination, except where retention is required by law.

Usage logs are retained for a rolling period of approximately 90 days. Aggregated, de-identified usage statistics may be retained indefinitely.

6. Security

Stipulate implements reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. These include encrypted transmission (TLS), hashed credential storage, access controls, and regular review of our security posture. No transmission over the internet is perfectly secure; we cannot guarantee absolute security.

7. Third-party links and integrations

The Service may reference or link to third-party websites or services (for example, court filing systems or statute databases). Stipulate is not responsible for the privacy practices of those third parties. We encourage Licensees to review the privacy policies of any third-party services they use in connection with the platform.

8. Your rights and choices

Licensees may access, correct, or request deletion of account information by contacting us at the address below. Where the Service is used by a Licensee to process third-party data, requests from individuals whose information appears in submitted documents should be directed to the Licensee, who is the controller of that data.

We do not currently respond to "Do Not Track" browser signals, as there is no uniform standard for how they should be interpreted.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered Licensees via email before taking effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

10. Contact

Privacy-related inquiries may be directed to Stipulate Technologies, Inc. at privacy@stipulatesystems.com or by mail to the address on file with the Delaware Division of Corporations.