Privacy Policy

1. Data We Collect

• Email address and account/session information.
• Payment data processed via Stripe.
• Contract inputs and user-provided text submitted for analysis or generation.
• Signature and verification data, which may include signer name, email address, signing status, timestamp, document hash, verification ID, IP address where legally permitted, device/browser metadata, provider transaction ID, certificate metadata, signature evidence records and audit log events.
• Usage analytics and product events used to operate and improve the service.
• Anonymized interaction data such as clicks, scroll depth, hover duration, and coarse page coordinates used to improve UX and pricing flows. We do not record form contents or session replay.

2. Purpose

• Provide contract generation and analysis services.
• Process signature and verification data for document integrity, auditability, fraud prevention, dispute evidence, user-requested signing workflows and legal compliance.
• Improve system performance and product reliability.
• Ensure billing, fraud prevention, security, and legal compliance.

3. Data Storage

Data is processed within secure cloud infrastructure and, where applicable, EU-oriented operational safeguards. Contract data is not retained after processing unless required for service operation, billing, support, or explicit user-requested storage.

4. Third Parties

We use Stripe for payments and Cloudflare for hosting, security, routing, and infrastructure operations. Where user-requested signing workflows are enabled, configured signature providers may process signing metadata, identity verification data, provider transaction IDs, certificate metadata and audit evidence. These providers process data according to their own security, identity verification and compliance commitments.

5. User Rights (GDPR)

• Access your data.
• Request deletion.
• Request correction.
• Object to or restrict certain processing where legally available.

6. Data Retention

We retain data only as long as necessary for service operation, billing, legal compliance, fraud prevention, support, and security.

7. Security

We implement technical and organizational measures to protect your data, including secure processing, access boundaries, and backend-only handling of secrets and paid entitlements.

Contact

legal@contractbot.dk