Privacy Policy

Information We Collect

ContractMetric is an AI-assisted contract intelligence platform for organizations and their authorized team members. We collect the information needed to create company workspaces, analyze contracts, support collaboration, and operate the service.

Account and company information

• Your name, business email, password credentials, preferred language, profile image, and security settings.
• Your company name, business details, subscription plan, assigned role, and workspace permissions.
• Information supplied when an administrator invites or manages employees in a company workspace.

Contracts and workspace content

• Contracts, drafts, attachments, and text you upload or submit for analysis.
• Extracted contract details, summaries, clauses, risk scores, compliance findings, vendor information, notes, approval decisions, and AI chat prompts and responses.
• Team-chat messages and attachments shared within your workspace.

Payments and communications

• Subscription status, plan, billing cycle, transaction references, and limited payer details received from our payment providers. ContractMetric does not receive or store your full payment-card number.
• Messages sent to support, sales, privacy, partner, or newsletter teams, including your email address and the content of your request.

Information collected automatically

We may collect IP address, browser and device details, login and security events, timestamps, feature interactions, diagnostic information, and cookie or session identifiers. We use this information to authenticate users, prevent abuse, troubleshoot errors, and understand service performance.

How We Use Your Information

We use personal information to perform our agreement with you or your organization, pursue legitimate operational and security interests, comply with legal duties, and, where required, based on your consent. This includes:

• Creating accounts and company workspaces, verifying email addresses, enabling two-factor authentication, and applying role-based permissions.
• Storing and analyzing submitted contracts to produce summaries, clause extraction, risk and compliance insights, renewal information, and other features requested by users.
• Supporting contract workflows, assignments, legal and financial reviews, vendor views, team chat, notifications, and account administration.
• Managing subscriptions, trials, renewals, cancellations, and payment reconciliation.
• Sending service, security, contract, and account communications, plus marketing messages where permitted.
• Detecting misuse, protecting accounts, diagnosing faults, and improving reliability and usability.
• Complying with applicable law, enforcing our terms, and establishing or defending legal claims.

AI processing

When you request an AI feature, relevant contract text and your instructions may be sent to configured AI service providers to generate the requested output. ContractMetric may also create numerical text representations to support contract search and related features. AI output can be inaccurate and should be reviewed by an appropriately qualified person.

Cookies

ContractMetric uses cookies and browser storage for secure sessions, request protection, language preferences, and limited interface settings. Optional analytics technologies will only be used where enabled and where any legally required consent has been obtained. See our Cookie Policy for more detail.

Data Sharing

We do not sell personal information or customer contract content. We disclose information only as needed to provide and protect ContractMetric or where the law requires it.

• AI providers: relevant contract text and prompts may be processed when you request AI analysis, embeddings, or contract chat.
• Payment providers: billing and transaction information is processed to start, renew, or cancel subscriptions and verify payment events.
• Infrastructure and communications providers: hosting, storage, email delivery, monitoring, and support providers may process limited data on our behalf.
• Your organization: company administrators and authorized workspace members may access information according to their roles and the sharing features you use.
• Legal and business events: information may be disclosed to comply with law, prevent harm or fraud, enforce agreements, or complete a merger, financing, reorganization, or sale subject to appropriate safeguards.

Service providers are permitted to process information only for the services they provide to us and under applicable contractual obligations.

Data Security

You are responsible for protecting your credentials, assigning suitable workspace roles, and ensuring that documents are shared only with authorized users. No internet service can guarantee absolute security. If we confirm a data incident requiring notice, we will notify affected parties as required by applicable law.

Your Rights

Depending on your location and subject to legal exceptions, you may have rights to access, correct, delete, restrict, object to processing, or obtain a portable copy of personal information.

• Update certain profile and preference information from your account.
• Ask for a copy or correction of personal information we hold about you.
• Request deletion or restriction where the applicable conditions are met.
• Withdraw consent at any time where processing relies on consent.
• Opt out of non-essential marketing communications.
• Submit a complaint to the data-protection authority in your jurisdiction.

If your account is managed by your employer or another organization, please contact its workspace administrator first for requests concerning workspace content. You may also contact us below. We may verify your identity and authority before acting on a request.

Data Retention

We retain account, workspace, contract, communication, and billing records for as long as reasonably necessary to provide the service, maintain security and business records, comply with legal obligations, resolve disputes, and enforce agreements.

Contract records may remain available during an active subscription and for a limited period after deletion or account closure where needed for backup recovery, fraud prevention, legal compliance, or dispute handling. Newsletter records are retained until you unsubscribe or we no longer need them. When information is no longer required, we delete or anonymize it in accordance with our operational processes.

International Transfers

ContractMetric's hosting, AI, payment, email, and support providers may process information in countries other than the country where you live or work. Where applicable law requires it, we use contractual or other recognized transfer safeguards and assess the protections applied by our providers.

Changes to This Policy

We may update this Privacy Policy when ContractMetric features, providers, business practices, or legal requirements change. We will publish the revised version and update the “Last updated” date. If a change materially affects how we use personal information or your rights, we will provide additional notice where reasonably appropriate.