Who we are
This Privacy Policy explains how Agreementsoftware ("we", "us", "our") handles personal data when you visit agreementsoftware.com, try the Contract snapshot demo, create an account or use our contract management service. Agreementsoftware is the operator of the website and the service. You can reach us about anything in this policy at [email protected].
Data we collect when you sign up
When you create an account, we collect the work email address you enter and a 6-digit confirmation code that we send to that address so we can verify it belongs to you. The code expires after a short time and is used only for verification. Along with the signup we record the plan you showed interest in (for example Starter, Plus, Pro or Enterprise), the page on our site where you signed up, any campaign parameters in the link you followed (utm source, medium, campaign, term and content), your IP address and your browser's user agent. We use the IP address and user agent to prevent abuse, such as automated signups, and to rate limit requests.
Data we collect when you use the website
Our servers keep standard technical logs (IP address, date and time, requested page, response code, user agent) to operate and secure the site. We also record first-party events on our own site, such as a demo run, a demo result viewed, the signup form opened, submitted or confirmed, and a pricing button clicked. These events are not shared with advertising networks, and we do not use fingerprinting.
The Contract snapshot demo
The demo on our homepage lets you run one of the bundled agreements or paste your own contract text. Text you paste into the demo is sent for processing so we can return the key terms, notice deadline, renewal timeline and risk notes, and it is not stored after the result is returned. We keep only a count of demo runs per IP address for rate limiting. Please do not paste contracts containing information you are not permitted to share.
Contract data in the service
When you use the service, you upload contracts and related information (documents, extracted fields, comments, approvals, signatures, owners and dates). We process this contract data only to provide the service to you: storing it, extracting terms, sending alerts, running approvals and e-signature, and showing it to the people you give access to. Your contracts stay yours, and you can export everything at any time. We do not use your contract data to train AI models, ours or anyone else's, and we do not sell it.
How we use personal data
- To create and verify your account and to send you the confirmation code.
- To provide, maintain and secure the service, including renewal and obligation alerts you configure.
- To respond to your messages, security review requests and support questions.
- To send service messages about your account, billing and changes to the service.
- To understand which pages and features are used, in aggregate, so we can improve the site and the product.
- To prevent fraud and abuse and to comply with legal obligations.
Legal bases
Where the GDPR or similar laws apply, we process personal data to perform our contract with you or take steps at your request before entering into it, for our legitimate interests in operating, securing and improving the service, to comply with legal obligations, and where required, on the basis of your consent, which you can withdraw at any time.
Service providers we use
We share personal data only with service providers that help us run the service, under agreements that limit their use of the data to providing services to us. The categories are:
- Hosting and infrastructure providers that run our servers and databases.
- An AI model provider that processes contract text to extract terms and dates. The provider acts as our subprocessor, processes the text only to return the result to us, and does not use it to train its models.
- Email delivery providers that send confirmation codes, alerts, signature requests and service messages.
- A payment processor that handles subscription payments. We do not store full card numbers on our servers.
We may also disclose data if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to the data transferred.
Cookies
We use only essential cookies: a session cookie that keeps you signed in and protects forms against cross-site request forgery. We do not use advertising or third-party tracking cookies. Because these cookies are strictly necessary for the site to work, they do not require a consent banner in most jurisdictions.
Data retention
We keep account data for as long as your account is active. Contract data is kept for as long as you keep it in the service; when you delete a contract or close your account, we delete the related data from active systems within 30 days and from backups on their normal rotation. Signup records of accounts that were never confirmed are deleted after a limited period. Server logs are kept for a limited period for security purposes. Enterprise customers can agree custom retention. We may keep some records longer where the law requires it, for example invoices.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent. Residents of California have the right to know what personal information we collect, use and disclose, to request deletion and correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, write to [email protected] from the email address on your account. We may need to verify your identity before acting on a request. You may also complain to your local data protection authority.
Contract data about other people
Contracts you upload may contain personal data about other people, such as signatories or employees. For that data, you decide what is uploaded and why, and we process it on your behalf to provide the service. Enterprise customers can request a data processing agreement.
International transfers
We and our service providers may process data in countries other than your own. Where the law requires it, we use appropriate safeguards for such transfers, such as standard contractual clauses.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it to run the service. Within the product, roles and permissions control who can see which contracts. No system is perfectly secure, and we will notify you without undue delay if a breach affects your data, as required by law.
Children
The website and the service are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify account holders by email before the change takes effect.
Contact
Questions about this policy or your data: [email protected].