Privacy Policy

• Content you submit for comparison — project agreement text (uploaded as PDF or pasted) and the client request you paste. PDFs are read inside your own browser; only the extracted text is sent for comparison, and only when you press “Check If It's Extra.”
• Support messages — your email address and message contents if you contact us.
• Usage and technical data — standard server and diagnostic logs (such as IP address, device and browser type, pages visited, and timestamps) collected by our hosting provider to operate and secure the service. The published application also uses Lovable Visitor Analytics to measure visits and product usage, including visitor and page-view counts, pages viewed, referral sources, device category, approximate country, session duration, and bounce rate.
• Purchase records — when you buy, our reseller and Merchant of Record, Paddle, collects your payment and billing details directly. We receive only what is needed to confirm your purchase (such as a transaction or subscription reference and its status); we never see or store your full card details.

IsItExtra has no user accounts, no login credentials, no saved projects, and no document library.

For Canadian users, we collect, use, and disclose personal information with consent or as otherwise permitted by applicable Canadian privacy law for reasonable, identified purposes. The legal-basis labels below — including contract performance and legitimate interests — apply where the GDPR or UK GDPR applies.

• To perform the project scope comparison you request (contract performance).
• To confirm purchases and grant the access you paid for (contract performance).
• To operate, secure, understand usage of, and improve the service, and to prevent fraud and abuse (legitimate interests).
• To respond to your support requests (legitimate interests / contract performance).
• To comply with legal obligations, such as tax and accounting records (legal obligation).

Your project agreement is used only to perform the requested scope comparison. We do not use your uploaded agreements or client requests to advertise to you, and we do not sell personal information.

Agreements you upload may contain confidential business information. IsItExtra is designed around temporary processing. PDFs are read or parsed in your browser, and the extracted agreement text and client request are transmitted for the AI-assisted comparison you request. After processing, IsItExtra does not intentionally persist the agreement or client request in its own server-side database or document storage. A temporary or convenience copy of the current comparison may exist in your own browser storage so the result can reopen after checkout. Service providers and AI infrastructure providers may maintain limited operational or security logs according to their applicable practices.

We share personal information only with the categories of recipients needed to run IsItExtra:

• Service providers / subprocessors — hosting and infrastructure and visitor analytics (Lovable), and the AI processing provider that performs the comparison on the text you submit, each processing data to provide its service to us.
• Merchant of Record (Paddle) — for the sale of the product, subscription management, payment processing, tax compliance, and invoicing. Paddle acts as an independent controller for the payment data it collects; see Paddle's own privacy policy for details.
• Professional advisers — legal or accounting advisers where necessary.
• Authorities — where disclosure is required by law.

We keep personal information only as long as needed for the purposes above, then delete or anonymize it. Uploaded agreement text and client requests are not intentionally retained after your comparison is returned. Purchase and transaction records are retained as required for tax, accounting, and legal limitation periods; support correspondence is kept only as long as needed to handle your request and any follow-up.

IsItExtra is subject to British Columbia's Personal Information Protection Act (PIPA), where applicable, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable, including applicable interprovincial and international commercial handling of personal information. Under applicable Canadian privacy law, you may request access to the personal information we hold about you, ask for it to be corrected, withdraw consent where processing is based on consent, and challenge our compliance. If you are in the UK or EEA, you additionally have the right to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and to complain to your supervisory authority; we respond to verified requests within one month. To exercise any of these rights, contact the Privacy Officer in Section 10.

Our service providers may process data outside Canada, including in the United States and other countries. Where personal information is transferred internationally, we rely on appropriate safeguards such as contractual protections consistent with applicable law, and your information may be subject to the laws of the jurisdictions where it is processed.

We use appropriate technical and organizational measures to protect personal information, including encrypted transport (HTTPS), server-side handling of credentials, and access controls. Because IsItExtra has no accounts and stores no documents, the amount of personal information at risk is deliberately minimal. No method of transmission or storage is perfectly secure, but stateless processing keeps our exposure — and yours — as small as practical.

IsItExtra uses a small number of essential browser storage items: a secure, encrypted cookie that confirms your Pro subscription status on the browser you used at purchase, and browser storage that lets an in-progress comparison reopen after checkout. These are strictly necessary for the service to function and are not used for advertising or cross-site tracking. You can clear them at any time in your browser settings; doing so will remove Pro recognition on that browser and any locally saved comparison.

Lovable Visitor Analytics is enabled on the published application to provide product and usage analytics, such as visits, page views, traffic sources, device category, approximate country, session duration, and bounce rate. This information helps us understand and operate IsItExtra. This is distinct from advertising or remarketing tracking. IsItExtra does not currently use Meta Pixel, Google Ads tracking, or other advertising or remarketing trackers. The application's prepared custom product events are not currently sent to a separate analytics provider. We will update this policy before enabling advertising or marketing tracking technologies.

Privacy Officer: Kacey Dembicki. Privacy questions, complaints, access requests, and correction requests may be directed to the Privacy Officer at Businessneeds26@gmail.com. For payment and billing data held by Paddle, contact Paddle via paddle.net. If we change this policy, we will post the updated version here with a new “last updated” date.