Privacy Policy
How we handle the contracts you trust us with, and the people who sign them.
1. Scope
This policy explains how we handle personal data when you visit this website, create an account, and use the contract drafting, review, approval, e-signature, vault, renewal and obligation features (together, the Service).
When your organisation uploads contracts or sends them for signature, your organisation decides what data is processed and why. In that role we act as a processor on its behalf.
2. Information we collect
- Account details: name, work email, company, role and the plan you choose.
- Contract content: documents you upload or draft, comments, versions and the key terms extracted from them.
- Signer and approver data: names, email addresses, one-time code verification results, timestamps, IP addresses, device and browser details recorded in the audit trail.
- Usage data: pages viewed, features used and error logs, used to keep the Service working and secure.
- Messages you send us through the sign-up or Contact us forms.
3. How we use it
- To provide the Service, including AI clause review against your own playbook and term extraction for your vault and calendar.
- To create audit trails that evidence who signed a contract, when, and from which device.
- To send login details, signing requests, approval requests, renewal and obligation reminders.
- To respond to your questions and provide support.
- To protect the Service against fraud, abuse and security threats.
4. Contracts and AI
Your contracts are processed only to provide the Service to your organisation. They are never used to train AI models for other customers, and suggestions shown to you come only from your own workspace.
AI review is not legal advice. It compares a contract with the rules you set, and important contracts should be checked by a qualified lawyer.
6. Security
Contracts are encrypted in transit and at rest. Access is limited to the people and teams your administrators choose, and views and downloads are logged. Signed documents are sealed so later changes can be detected.
7. Retention and deletion
Contracts and audit trails are kept for as long as your account is active, or for as long as your administrators decide. You can export or delete contracts at any time. After an account is closed, its data is deleted within 30 days, except where the law requires us to keep records for longer.
8. Your rights
You may ask to access, correct, export or delete your personal data, or withdraw consent where processing is based on consent. If your data is in a contract that belongs to an organisation, we will pass your request to that organisation.
10. Contact
For privacy questions or requests, write to us through the Contact us page and choose "security and data handling" as the topic.