QCM text retrieved on 24 September 2026. The contact address was updated on 27 September 2026; the rest of the document is unchanged. Consult the official source ↗
Last updated: 2026-08-19
Who we are
Qedara Contract Management ("Qedara", "we") is an AI-assisted contract management platform. This policy explains what data we process when you use the service. Contact: office@qedara.com.
Data we process
Account data: name, email address, password (stored only as a salted hash), email-verification status, session metadata.
Workspace data: workspace names, membership and roles, invitations (invitee email and role).
Contract data: the documents you upload and the text extracted from them, document metadata (file name, size, language), versions you create.
AI analysis: summaries, extracted parties, dates, clauses, risks, obligations, comparison results and risk scores generated from your contracts.
Audit logs: security-relevant events (logins, uploads, exports, deletions, role changes) with user, timestamp, IP address and event metadata. Audit logs never contain contract text or passwords.
AI processing
To produce analyses and comparisons, contract text is transmitted to our AI subprocessor — OpenAI (or the AI provider configured for your deployment). Requests are sent with provider-side storage disabled (the provider is instructed not to retain request or response payloads beyond transient processing).
AI output is informational only. It does not constitute legal advice — see the AI Processing Notice.
Your responsibility for uploaded content
You confirm that you have the legal right to upload and process each document you submit, including any personal data it contains, and that doing so does not violate confidentiality obligations you owe to third parties. You are the data controller for the contract content you upload; Qedara processes it on your behalf.
Retention
Contract data, versions, analyses and comparisons are retained for as long as your workspace exists, and are deleted when you delete the contract, the workspace or your account.
Audit logs are retained for up to 12 months for security and compliance, then pruned. When you delete your account, your email address is anonymized in audit records.
Backups are retained on a rolling basis (currently up to 30 daily snapshots) and expire automatically.
Your rights
You can export your workspace data (Settings / API), delete contracts, workspaces or your entire account from within the product, and request assistance at office@qedara.com. EU users have the rights provided by the GDPR, including access, rectification, erasure, portability and complaint to a supervisory authority.
Subprocessors
OpenAI (AI analysis, provider-side storage disabled), Resend (transactional email), Hetzner (EU hosting). We do not sell personal data and we do not use your contract content to train AI models.