Effective Date: July 5, 2026
We collect the information you provide when creating an account (email, name) and the contract documents you upload for analysis. We also store your analysis results and chat history so you can access them later.
Optionally, you may provide your credit score range and state of residence in your profile to improve analysis accuracy (interest-rate comparisons and state-specific tax/registration estimates). We do not collect your income.
We also record in-app product-interaction events — for example, which suggested worksheet actions you accept — linked to your account and used to improve the product. We keep basic service-usage metering (such as a count of the analyses you run) tied to your account to operate the service.
When you upload a contract, its pages are transmitted to our AI provider (Claude by Anthropic) for analysis. Anthropic does not use commercial API data to train its models. Under Anthropic's data-use policies, inputs and outputs may be retained for a limited period for abuse monitoring and safety purposes. Your document images are sent to Anthropic solely to generate your analysis results.
Your account information, analysis results, and chat history are stored in our database (MongoDB Atlas). Your uploaded document images are stored in that same database alongside your contract records, not in separate file storage. You can delete any contract and all of its associated data — including the uploaded images — at any time from the app.
We use the following third-party services to provide Ratifi:
To enrich your analysis with market and reference data, we call the following external sources with your vehicle's details (such as year, make, model, trim, and VIN) — never your personal information or contract documents: MarketCheck (comparable dealer listings), NHTSA (VIN decode, safety ratings, and recalls), and the EPA (fuel-economy ratings). We also query the Federal Reserve (FRED) for national interest-rate benchmarks, which receives no vehicle or personal data, and the U.S. Energy Information Administration (EIA) for local fuel prices, which receives your state.
We do not sell, rent, or share your personal information or contract data with third parties for marketing purposes. Your data is only shared with the service providers listed above, solely for the purpose of operating the app.
For privacy inquiries, contact us at support@ratifi.app.
We recommend redacting personal identifiers (Social Security numbers, bank account numbers, driver's license numbers) from your contracts before uploading. The AI does not need this information to analyze your contract terms.
Your data is retained as long as your account is active. When you delete your account, we permanently remove your user data — your profile, your contracts (including the uploaded document images), your analyses, your chat history, your corrections, your product-interaction events, and your login sessions and tokens. This happens immediately, with no recovery period.
Your purchase and transaction records are retained for financial and tax recordkeeping, but they are anonymized — they are no longer linked to you or your identity.
If you delete an individual contract, all data associated with that contract (its images, analysis, and chat messages) is permanently removed immediately.
Ratifi is intended only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from someone under 18, we will promptly delete the account and all associated data. If you believe someone under 18 has created an account, please contact us at support@ratifi.app.
We use Sentry for crash reporting and error monitoring in the mobile app. Sentry may collect device information (device model, operating-system version), app state at the time of a crash, and error traces. This data is used solely to identify and fix bugs; no personal information or contract content is included in crash reports.
On our website (not the mobile app), we use Google Analytics to understand general traffic and usage patterns. Google Analytics sets cookies and collects standard web-analytics data such as pages visited, approximate location, and device or browser type.
If you provide your state or ZIP code in your profile, we use it to produce location-relevant estimates — for example, state-specific tax and registration figures, and local fuel prices (which we retrieve from the U.S. Energy Information Administration using your state). Your location data is not shared with any third party for marketing or tracking purposes.
In the unlikely event of a data breach affecting your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, in accordance with applicable law.