Introduction

Welcome to ContractMitra. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use and disclose it, how we protect it, your rights and choices, and how to contact us about privacy matters. By using our services, you agree to the practices described in this policy.

1. Information We Collect

We collect only the information necessary to provide and improve our services. Collection categories include:

• Account information: name, email address, profile details you provide when registering.
• Uploaded documents and content: files, contracts, and related metadata (e.g., filenames, upload timestamps).
• AI chat interactions: messages, prompts, and assistant responses you exchange with our AI in order to deliver contextual features.
• Usage and technical data: IP address, device and browser information, operating system, page views, logs, and anonymized analytics used to improve reliability and performance.
• Support and communications: any content you provide when contacting customer support.

We do not sell personal data. We avoid collecting unnecessary personal information and limit retention to what is needed for legitimate purposes.

2. How We Use Your Information

We use the information we collect for these primary purposes:

• To deliver, operate, maintain and improve the features of our platform — including AI-based document tooling and collaboration.
• To preserve project context and personalize your experience across sessions and devices.
• To respond to your requests, provide customer support, and communicate service changes or security alerts.
• To detect, investigate and prevent fraud, abuse, security incidents, and other harmful activity.
• To comply with legal obligations or enforce our Terms of Use.

When required under applicable laws, we will process personal data only with a lawful basis (for example: consent, performance of a contract, legal obligation, legitimate interests where not overridden by your rights).

3. Legal Bases for Processing (where applicable)

If you are an EU/EEA resident, our lawful bases for processing include:

• Performance of a contract: to provide services you requested (account access, file processing, AI features).
• Legal compliance: to comply with laws and respond to lawful requests from authorities.
• Legitimate interests: to secure the platform, prevent fraud, and improve our services — balanced against your rights and expectations.
• Consent: for optional features such as marketing communications or certain analytics where we ask for your permission.

4. Sharing and Disclosure

We share data only as described below or with your consent:

• Service providers: trusted vendors who perform services on our behalf (hosting, analytics, payment processors). They are contractually restricted from using your data for other purposes.
• Legal requests: when required by law, court order, or to respond to lawful government requests; or to protect the rights, property, or safety of our users and third parties.
• Business transfers: in connection with a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction (with notice where required).

We do not sell your personal information nor do we share documents you upload with advertisers.

5. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate the service, analyze trends, and understand how users interact with the platform. Cookies help with login sessions, remembering preferences, and analytics. You can manage or block cookies via your browser settings, but note that some features may require cookies to function correctly.

6. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including:

• Encryption in transit using HTTPS/TLS and encryption at rest for stored data.
• Role-based access controls, least-privilege principles, and audit logging.
• Periodic security assessments, vulnerability scanning, and backups.

While we strive to protect your data, no system is completely secure. Please help protect your account by using a strong password and keeping your login credentials private.

7. Data Retention

We retain personal information only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we will remove or anonymize your personal data within a reasonable timeframe, except for information we are required to retain for legal or legitimate business purposes (for example, financial records, compliance logs).

8. Your Rights & Choices

Depending on your jurisdiction, you may have rights regarding your personal data. Typical rights include:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal exceptions).
• Portability: Request a machine-readable copy of your data to transfer to another service.
• Objection & Restriction: Object to or request restrictions on certain processing activities (e.g., direct marketing, profiling based on legitimate interests).
• Consent withdrawal: Where processing is based on consent, you may withdraw consent at any time (this does not affect processing already performed).

To exercise these rights, contact us at support@contractmitra.com. We may require identity verification before fulfilling requests and will respond within applicable legal timeframes.

9. Children’s Privacy

Our services are intended for adults and we do not knowingly collect personal information from children under the age of 18 (or a lower age if required by local law). If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.

10. Third-Party Links and Integrations

Our platform may contain links to third-party websites or services, or integrate with third-party providers (e.g., cloud storage, analytics). These third parties have their own privacy practices for which we are not responsible. We encourage you to review their policies before providing personal information.

11. International Transfers

We operate globally. Your information may be processed in countries other than your own. Where required by law, we apply appropriate safeguards to protect personal data during international transfers (for instance, standard contractual clauses or equivalent safeguards).

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice by updating the "Last updated" date and, where appropriate, provide additional notice (for example, via email or site announcement). Continued use of the service after changes indicates acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact our privacy team:

Email: support@contractmitra.com
Address: Tei Legal / ContractMitra (if you need a postal address, add it here)

If you are an EU/EEA resident and remain unsatisfied after contacting us, you may also lodge a complaint with your local data protection authority.

14. Additional Legal Notes

This Privacy Policy is part of our Terms of Use. Nothing in this policy creates contractual rights for third parties. The policy is governed by the applicable laws of the jurisdiction where Tei Legal operates, subject to mandatory local consumer protection rules.