Privacy Policy
Last updated: May 2026 · Governed by English law
Who we are
Arbiter is operated by VantagePoint Networks, London. Questions about this policy should be directed to info@vpnetworks.co.uk.
What we collect
We collect only what is strictly necessary to operate the service:
- Contract text — submitted for analysis. Stored temporarily for 7 days to generate shareable report links, then permanently deleted. Never used for training or shared with third parties beyond the AI provider (Groq, Inc.) processing the request.
- IP address — used solely to enforce the free-tier rate limit (1 analysis per 30 days). Stored in our Redis cache for 30 days, then deleted automatically.
- Billing email and Stripe Customer ID — collected only if you purchase a subscription, via Stripe's checkout. We store a signed identifier in your browser (cookie) to recognise returning paid users. We do not store card details.
- Contact form submissions — name, email address, and message, forwarded directly to our inbox. Not stored in any database.
How long we retain it
Third-party processors
We use the following third parties to operate the service. No other parties receive your data.
- Groq, Inc. — AI inference. Contract text is sent to Groq's API for analysis. Subject to Groq's data processing agreement.
- Upstash — Redis cache for rate limiting and result storage. Data stored in the EU.
- Stripe, Inc. — Payment processing and subscription management.
- Vercel, Inc. — Hosting and edge delivery.
Cookies
We use one functional cookie: a signed arbiter_paid token set on successful subscription purchase. It is used exclusively to grant access to paid features and expires with your subscription. We do not use tracking, advertising, or analytics cookies.
Your rights
Under UK GDPR you have the right to access, correct, or erase personal data we hold about you. Because we retain minimal data and most of it expires automatically, in practice there is little to request. To exercise any right, contact info@vpnetworks.co.uk.