Privacy Policy

1. Scope and privacy by design

This policy applies to Contract Definitions, a Microsoft Word add-in provided by GUT Ventures GmbH. Contract Definitions reads the open document through Microsoft's Office JavaScript API and analyzes defined terms inside the add-in task pane.

Contract text and scan results are not uploaded to GUT Ventures, sent to an AI provider, used for analytics, or stored by an application backend.

2. Document content and scan results

Contract text is accessed only to detect definitions, display them in the task pane, navigate to their locations, and optionally add temporary Word annotations. Processing takes place in the add-in WebView. Contract text and scan results remain in memory while the task pane is open and are not written to browser storage by the current version of the add-in.

The add-in does not create an account, build a user profile, or collect document names, document identifiers, user identifiers, or usage events for GUT Ventures.

3. Local preferences

Contract Definitions uses local browser or WebView storage only for non-document preferences, such as the annotation mode and a settings version. These preferences remain in the Office add-in environment on the user's device and are not transmitted to GUT Ventures. The add-in remains usable if local storage is blocked; preferences may then reset between sessions.

4. Delivery of static application files

The add-in is delivered as static HTML, JavaScript, CSS, and image files. We currently plan to use Cloudflare Pages as the hosting and content-delivery provider. When Word retrieves these files, Cloudflare may process technical connection data such as the IP address, time of request, requested file, user agent, and security information needed to deliver and protect the service.

This processing is based on our legitimate interests in providing a secure, reliable, and abuse-resistant add-in under Article 6(1)(f) GDPR. GUT Ventures does not use Pages Functions, Cloudflare Web Analytics, advertising cookies, or application telemetry for Contract Definitions. We do not maintain a separate application log of document use. Technical data is retained according to the provider's service configuration and only for as long as necessary for delivery, security, and legal obligations.

Cloudflare acts as a processor for service delivery and may process data outside the European Economic Area subject to applicable data transfer safeguards. Further details are available in the Cloudflare Data Processing Addendum. This section will be updated before publication if a different hosting provider is selected.

5. Microsoft Word and Office.js

Contract Definitions runs within Microsoft Word and loads Office.js from Microsoft's official content-delivery network, as required for Office add-ins. Microsoft's processing in Microsoft 365, Word, and Office.js is governed by the agreements and privacy information applicable to the user's Microsoft account or organization. GUT Ventures does not receive Microsoft account credentials.

6. Support communications

If you contact us by email, we process the contact details and message content you choose to provide in order to answer your request. The legal basis is Article 6(1)(b) GDPR where the request concerns a service relationship and otherwise Article 6(1)(f) GDPR, based on our legitimate interest in providing support. Do not send confidential contract text; use a synthetic or anonymized example.

7. Your rights

Subject to the conditions of applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may also lodge a complaint with a competent data protection authority. In Austria, this is the Austrian Data Protection Authority.

Because Contract Definitions does not transmit document content or local preferences to GUT Ventures, we generally cannot identify or retrieve that local data.

8. Changes and contact

We will update this policy if the add-in's data flows, hosting, or legal requirements change. Material changes will be reflected on this page. Questions and privacy requests can be sent to [email protected].

Draft date: 28 August 2026.