Privacy Policy

tractlyAI (“we,” “us,” or “our”) provides an online platform to help businesses manage contracts and renewals. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our websites and services (collectively, the “Services”).

1. Information we collect

We collect information that you provide directly, information collected automatically, and information from third parties as described below.

• Account and profile data: name, email address, password (stored using industry-standard hashing), organization or workspace details, and similar identifiers you choose to provide.
• Contract and content data: files, metadata, categories, reminders, notes, and other content you upload or create in the Services.
• Usage and technical data: IP address, device and browser type, general location (such as region) derived from IP, timestamps, pages or screens viewed, and diagnostic or error information.
• Communications: messages you send to support or feedback forms, and records needed to respond to your requests.
• Billing data: when you subscribe to paid plans, our payment processor may collect payment details. We typically receive a limited subset of billing information (such as subscription status and partial payment identifiers) rather than full card numbers.

2. How we use information

We use information to:

• Provide, operate, maintain, and improve the Services;
• Create and manage your account and workspaces, including authentication and security;
• Process transactions, subscriptions, and usage-based limits tied to your plan;
• Provide customer support and respond to inquiries or legal requests;
• Monitor and analyze usage and performance to detect fraud, abuse, and technical issues;
• Send service-related notices, security alerts, and administrative messages (you may also receive optional product updates where permitted);
• Comply with applicable law and enforce our Terms of Service.

3. AI and automated processing

Where the Services include AI-assisted features (for example, summarizing or analyzing contract-related content), we may process the inputs you submit and related context to generate outputs. Depending on configuration, such processing may involve subprocessors or model providers. We implement safeguards designed to limit misuse and protect confidentiality, but you should not submit highly sensitive personal data unless necessary for your use case.

4. How we share information

We may share information:

• With service providers who assist us with hosting, analytics, email delivery, security, payments, and similar functions, subject to contractual obligations;
• Within your workspace when you invite collaborators or assign roles that can access shared content;
• For legal reasons if we believe disclosure is required to comply with law, regulation, legal process, or to protect the rights, safety, and security of tractlyAI, our users, or others;
• In connection with a business transaction such as a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality safeguards.

We do not sell your personal information as a “sale” is commonly defined.

5. Data retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on data type, account status, and legal requirements. You may request deletion of your account subject to lawful exceptions (such as billing records we must retain).

6. Security

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, or alteration. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

7. International transfers

If you access the Services from outside the country where we operate, your information may be processed in countries that have different data protection laws. Where required, we use appropriate safeguards (such as contractual clauses) for cross-border transfers.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal information, or to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below. We may need to verify your request.

9. Children

The Services are not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can take appropriate steps.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. For material changes, we may provide additional notice (such as an email or in-product notice) where appropriate.

11. Contact

Questions about this Privacy Policy or our privacy practices: contact us through the support or contact channels provided in the Services or on our website. If no channel is listed, email the address shown on your account or billing correspondence.