Privacy Policy

1. Scope and privacy by design

This policy applies to Contract Definitions, a Microsoft Word add-in provided by GUT Ventures GmbH. Contract Definitions reads the open document through Microsoft's Office JavaScript API and analyzes defined terms inside the add-in task pane.

Contract text and scan results are not uploaded to GUT Ventures, sent to an AI provider, used for analytics, or stored by an application backend.

2. Document content and scan results

Contract text is accessed only to detect definitions, display them in the task pane, navigate to their locations, and optionally add temporary Word annotations. Processing takes place in the add-in WebView. Contract text and scan results remain in memory while the task pane is open and are not written to browser storage by the current version of the add-in.

The add-in does not create an account, build a user profile, or collect document names, document identifiers, user identifiers, or usage events through the add-in for GUT Ventures. Microsoft Marketplace acquisition data is addressed separately in section 6.

3. Local preferences

Contract Definitions uses local browser or WebView storage only for non-document preferences, such as the annotation mode and a settings version. These preferences remain in the Office add-in environment on the user's device and are not transmitted to GUT Ventures. The add-in remains usable if local storage is blocked; preferences may then reset between sessions.

4. Delivery of static application files

The add-in is delivered as static HTML, JavaScript, CSS, and image files. GUT Ventures uses Cloudflare Pages as the hosting and content-delivery provider. When Word or a browser retrieves these files, Cloudflare may process technical connection data such as the IP address, time of request, requested file, user agent, and security information needed to deliver and protect the service.

This processing is based on our legitimate interests in providing a secure, reliable, and abuse-resistant add-in under Article 6(1)(f) GDPR. GUT Ventures does not use Pages Functions, Cloudflare Web Analytics, advertising cookies, or application telemetry for Contract Definitions. We do not maintain a separate application log of document use and do not export Cloudflare request logs. Cloudflare retains technical connection and security data according to the service configuration and its contractual retention rules. GUT Ventures does not keep a separate copy. The retention criterion is the time required to deliver and secure the static service and meet applicable legal obligations.

Cloudflare acts as a processor for service delivery and may process data outside the European Economic Area subject to applicable data transfer safeguards. Further details are available in the Cloudflare Data Processing Addendum. Where required, the addendum provides the applicable safeguards for international data transfers.

5. Microsoft Word and Office.js

Contract Definitions runs within Microsoft Word and loads Office.js from Microsoft's official content-delivery network, as required for Office add-ins. Microsoft's processing in Microsoft 365, Word, and Office.js is governed by the agreements and privacy information applicable to the user's Microsoft account or organization. GUT Ventures does not receive Microsoft account credentials.

6. Microsoft Marketplace acquisition data

When a user acquires Contract Definitions through Microsoft Marketplace, Microsoft may make lead or acquisition information available to GUT Ventures in Partner Center. Depending on the information associated with the Microsoft account and acquisition, this may include a name, email address, telephone number, country, organization, and information identifying Contract Definitions as the acquired offer. No contract text or scan result is included in this Marketplace data.

GUT Ventures does not connect a CRM system to this offer and does not use the mere acquisition of Contract Definitions for unsolicited marketing. We process Marketplace data only to administer the listing, respond to a request, provide support, prevent abuse, and comply with legal obligations. The legal basis is Article 6(1)(b) GDPR where the processing concerns the service relationship, Article 6(1)(f) GDPR for our legitimate interests in operating and supporting the offer, and Article 6(1)(c) GDPR where processing is legally required.

Microsoft currently documents that Marketplace offer leads are available to partners for six months and are then archived. GUT Ventures does not export or retain a separate copy unless it is needed to respond to a request or meet a legal obligation. Retention of Microsoft's platform copy and Microsoft's own processing are governed by the Microsoft Privacy Statement.

7. Support communications

If you contact us by email, we process the contact details and message content you choose to provide in order to answer your request. The legal basis is Article 6(1)(b) GDPR where the request concerns a service relationship and otherwise Article 6(1)(f) GDPR, based on our legitimate interest in providing support. Do not send confidential contract text; use a synthetic or anonymized example. Support correspondence is deleted when it is no longer needed, generally within 12 months after the request is closed, unless a longer period is required by law or for the establishment, exercise, or defense of legal claims.

8. Your rights

Subject to the conditions of applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may also lodge a complaint with a competent data protection authority. In Austria, this is the Austrian Data Protection Authority.

Because Contract Definitions does not transmit document content or local preferences to GUT Ventures, we generally cannot identify or retrieve that local data.

9. Changes and contact

We will update this policy if the add-in's data flows, hosting, or legal requirements change. Material changes will be reflected on this page. Questions and privacy requests can be sent to [email protected].

Last updated: 5 September 2026.