Legal

Privacy Policy

Effective Date: April 25, 2026

1. Introduction

This Privacy Policy explains how Pactora ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our AI-powered contract review platform ("Service"). We are committed to protecting your privacy and handling your data with the utmost care and transparency. By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organisation/firm name. Authentication is managed through our third-party provider (Clerk), and we do not store passwords directly.

Uploaded Documents

When you use the Service, you may upload contracts, playbooks, and other legal documents ("Your Documents"). We process these documents solely to provide contract analysis. We do not read, review, or use Your Documents for any purpose other than delivering the Service to you.

Usage Data

We automatically collect information about how you interact with the Service, including page views, features used, session duration, browser type, device information, and IP address. This data is collected via Vercel Analytics and Google Analytics.

Communications

When you contact us via email or our contact form, we collect the information you provide including your name, email address, and message content.

3. How We Use Your Information

  • Providing, operating, and maintaining the Service
  • Processing and analysing your uploaded contracts against your playbooks
  • Communicating with you about your account, support requests, and Service updates
  • Improving the Service through aggregated, anonymised usage analytics
  • Detecting, preventing, and addressing security incidents and technical issues
  • Complying with legal obligations and enforcing our Terms of Service

4. AI Processing & Zero-Training Policy

This is the most critical section for our legal users. Your Documents are processed by AI models solely to generate contract analysis reports within your active session. We maintain an absolute zero-training policy: Your Documents, playbooks, analysis results, and any derivative data are never used to train, fine-tune, improve, or benchmark our AI models or any third-party models. AI processing occurs in isolated, ephemeral environments. Document content is not retained in AI model memory after your analysis is complete.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information or Your Documents to any third party. We may share limited information with: (a) Service Providers — trusted third-party vendors who assist us in operating the Service (cloud hosting, authentication, analytics), subject to strict data processing agreements; (b) Legal Compliance — when required by law, subpoena, court order, or to protect our rights and safety; (c) Business Transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred, subject to the same privacy protections.

6. Data Retention

We retain your account information for as long as your account is active. Uploaded documents and analysis results are retained for the duration of your active subscription unless you delete them sooner. When you delete a document, it is permanently removed from our systems within 30 days. Upon account termination, all associated data — including documents, playbooks, and analysis history — is permanently purged within 60 days.

7. Data Security

We implement industry-standard security measures to protect your data, including: AES-256 encryption at rest; TLS 1.3 encryption in transit; logical tenant isolation between workspaces; role-based access controls; continuous vulnerability scanning; and audit logging of all data access events. While no system is 100% secure, we are committed to maintaining the highest standard of protection appropriate for sensitive legal data.

8. Cookies & Tracking Technologies

We use essential cookies required for the Service to function (authentication, session management). We use analytics cookies (Google Analytics, Vercel Analytics) to understand usage patterns and improve the Service. You can control cookie preferences through your browser settings. Disabling essential cookies may impair Service functionality.

9. Your Rights

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data and account
  • Portability: Request your data in a machine-readable format
  • Objection: Object to processing of your data for specific purposes
  • Withdrawal: Withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at privacy@pactora.in. We will respond within 30 days.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will take steps to delete such information promptly.

11. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place for any international data transfers, including standard contractual clauses and adequacy decisions where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the Service at least fifteen (15) days before becoming effective. Your continued use of the Service after the effective date constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team at privacy@pactora.in or through our Contact page.

Last updated: April 25, 2026

Questions? Contact privacy@pactora.in