Privacy Policy

1. Scope

This policy covers personal data we handle when you visit this website, sign up for a trial, contact us or use the contract lifecycle management service (the "Service"). It is written with the Digital Personal Data Protection Act, 2023 in mind.

When your company uses the Service, your company decides what contracts are uploaded and who can see them. For that content, your company is the data fiduciary and we process it on its instructions.

2. Data we collect

• Account details: name, work email, designation, company, team and the information you give us at signup.
• Correspondence: what you write to us through the contact form or by email.
• Customer content: contracts, templates, playbooks, approval records, signatures and audit trails stored in your workspace.
• Signer details: names, email addresses, phone numbers used for OTP, IP addresses and timestamps captured when someone signs.
• Usage data: log data, device and browser information and pages viewed, used to run and secure the Service.

3. How we use it

• To create and manage your workspace and send you login details.
• To provide the Service, including AI review, approvals, e-signature, obligation tracking, renewal reminders and search.
• To respond to your enquiries and provide support.
• To keep the Service secure, prevent misuse and meet legal obligations.
• To send product and billing communications. You can opt out of non-essential emails at any time.

4. Contracts and AI

Your contracts and playbooks are used only to provide the Service to your company. They are never used to train AI models for other customers and are never sold.

Where we use third-party AI model providers, they process content only to return results to you, under terms that prohibit them from retaining it for training.

5. Sharing

We share personal data only with service providers who help us run the Service, such as hosting, email delivery and e-signature verification, under written agreements that require them to protect it. We may disclose data where required by law or to protect our rights. We do not sell personal data.

6. Storage and security

Data is encrypted in transit and at rest. Access is limited by role and logged. Companies on plans that include data residency can keep their data in Indian data centres.

7. Retention

We keep account data while your account is active. Customer content is kept for as long as your company keeps it in the Service, and is deleted after your company closes its workspace and any export period has ended, unless the law requires us to keep it longer.

8. Your rights

You can ask to access, correct or erase your personal data, withdraw consent where we rely on it and nominate another person to exercise your rights. If your data is part of a customer's workspace, we will pass your request to that customer. You can write to us through the contact page, and you may also approach the Data Protection Board of India.

9. Cookies

This website uses only the cookies needed for it to work, such as the session cookie that checks forms are submitted by people. We do not use advertising cookies.

10. Changes

If we make material changes to this policy, we will notify account holders by email before they take effect.