Privacy Policy
Last Updated: November 24, 2025
Introduction
Contractable ("we," "us," or "our") operates the Contractable website and services. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our legal document generation platform.
Information We Collect
Information You Provide
- Account Information: Name, email address, password, and contact details
- Payment Information: Billing details processed through Stripe (we do not store full credit card numbers)
- Document Data: Information you provide to generate contracts and legal documents
- Communications: Messages you send through our contact forms or support channels
Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: Browser type, IP address, operating system, device identifiers
- Analytics Data: Usage patterns and performance metrics
- Cookies: Session data and preferences stored locally
How We Use Your Information
We use your information to:
- Generate and deliver legal documents and contracts
- Process payments and manage subscriptions
- Provide customer support and respond to inquiries
- Improve our services and user experience
- Send important updates about your account or our services
- Comply with legal obligations
- Prevent fraud and ensure platform security
Data Sharing and Disclosure
Third-Party Services
We share data with trusted service providers who help us operate our platform:
- Payment processors: To securely process payments (we use Stripe and do not store full credit card numbers)
- Cloud infrastructure providers: For hosting, authentication, and database services
- Email service providers: To deliver transactional emails and notifications
- Analytics providers: To understand user experience and improve our services
- AI service providers: To assist with document generation
Legal Requirements
We may disclose information when:
- Required by law or legal process
- Necessary to protect our rights or property
- Required to prevent fraud or security threats
- Necessary to comply with court orders or government requests
Business Transfers
If we undergo a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
Data Security
We implement industry-standard security measures including:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security audits and updates
- Monitoring and intrusion detection
- PCI-compliant payment processing
However, no system is completely secure, and we cannot guarantee absolute security.
Your Rights and Choices
Access and Control
You have the right to:
- Access your personal information
- Update or correct your data
- Delete your account and associated data
- Export your data
- Opt-out of marketing communications
- Disable cookies through browser settings
California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt-out of the sale of personal information. We do not sell personal information.
European Privacy Rights (GDPR)
For users in the European Economic Area, we comply with GDPR requirements, including:
- Right to access and portability
- Right to rectification and erasure
- Right to restrict processing
- Right to object to processing
- Right to withdraw consent
Data Retention
We retain your information for as long as:
- Your account is active
- Necessary to provide services
- Required by law or for legitimate business purposes
- Typically 7 years for financial records
Children's Privacy
Our services are not intended for users under 18 years of age. We do not knowingly collect information from children.
Cookies and Tracking
We use cookies and similar technologies for:
- Authentication and security
- Remembering preferences
- Analytics and performance monitoring
- Improving user experience
You can control cookies through your browser settings, though this may limit functionality.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
Email Communications
We may send you:
- Transactional emails (account notifications, document delivery)
- Service updates and announcements
- Marketing communications (with your consent)
You can unsubscribe from marketing emails at any time.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or through a prominent notice on our website.
Contact Us
For privacy-related questions or requests:
- Email: support@contractable.com
- Website: Contact Form
To exercise your privacy rights or request information deletion, please contact us through the channels above.
Legal Basis for Processing
We process your data based on:
- Contract Performance: To provide our services
- Legitimate Interests: To improve services and prevent fraud
- Legal Compliance: To meet legal obligations
- Consent: Where explicitly provided for marketing communications
Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their privacy policies before providing information.
By using Contractable, you acknowledge that you have read and understood this Privacy Policy.