Draft v0.4 · Last Updated: September 1, 2026
This Privacy Policy explains what personal information Pact collects when you use the Service, why, who else sees it, and what choices you have. It's incorporated by reference into Pact's Terms of Service; terms defined there have the same meaning here.
| Category | What | Why |
|---|---|---|
| Account (all profiles) | Name or display name, email address, password (stored as a salted hash — Pact never sees or stores your plaintext password) | Create and secure your login |
| Personal profile | Legal first/last name, date of birth | Legal capacity to contract (must be 18+) and identity records; never shown to other users — only your chosen display name is |
| Business profile | Business name, address, business email, point of contact, Employer Identification Number | Runs your Business Directory (shared contract pool, team invites); the Employer Identification Number is self-reported and not independently verified against the Internal Revenue Service or any registry |
| Contract content | The text, attachments, parties, versions, and signatures of every contract you create, receive, or are added to | The core of the Service — storing and managing your agreements |
| Identity verification | A verification result (pass/fail) and your verified name | Confirms you're a real, named person — see Section 5, "Identity Verification," for what we deliberately do not store |
| Billing | Your Stripe customer ID and subscription status | Your card number itself is never sent to or stored by Pact — it goes directly to Stripe's hosted Checkout page |
| Usage & audit records | Who viewed, edited, or signed a contract and when; IP address at signing and at Terms acceptance | The audit trail that makes an executed contract meaningful evidence, and the record that proves you agreed to these Terms |
| AI interactions (Pro/Enterprise tiers only) | Prompts you send Pact AI and, when you ask it to draft, revise, or analyze a contract, that contract's text | Powers the drafting/summarization/chat features — sent to our AI provider (Anthropic) to generate a response; see Section 4 |
| Device & connection | IP address, browser type, basic request logs | Security, abuse prevention, and the audit trail above |
Pact does not use third-party advertising trackers, ad pixels, or behavioral analytics scripts — there is nothing like that in the site today.
Pact sets one cookie: a session token (pact_token) that keeps you logged in. It's marked httpOnly (not readable by page scripts) and, in production, secure (HTTPS-only). We don't use third-party or advertising cookies.
Pact shares information only with the service providers ("sub-processors") needed to run the features you use, and with the other parties on a contract you send or are added to. We do not sell personal information. The current sub-processor list — kept in sync with the same list published on the Security page — is:
If you complete identity verification, Pact hands you off to Stripe Identity's own hosted, compliant verification flow. Stripe captures and stores the sensitive document image, photograph, or Social Security Number data — Pact's own database stores only the verification result (pass/fail) and your verified name, never the raw document or Social Security Number itself. This is a deliberate design choice: that data carries compliance obligations (breach-notice laws, state biometric-privacy statutes) that make sense for a dedicated identity-verification company to carry, not a platform like Pact.
You can close your account at any time from Settings. Closing it immediately disables login, cancels any recurring subscription, and removes your profile from search, sharing, and invite lookups — but it does not immediately erase your data. Here's exactly what happens, and when:
Contracts are not solely yours to delete. Because a contract may involve one or more other parties, closing your account does not delete contracts to which another party is also a signatory or named counterparty — their access to a shared, executed contract is preserved regardless of what you do to your own account. We retain executed contracts and their full audit trail (creation, edit, view, and signature history) for seven (7) years following the contract's execution or termination date, or longer if required by law, an open dispute, or a legal hold, whichever is later.
Personal profile data not required to preserve an executed contract or satisfy a legal retention obligation — your name, contact information, and profile details not embedded in a signed contract — will be deleted or de-identified within thirty (30) days of account closure, provided no contract tied to your profile is active, pending signature, or subject to dispute or legal hold. Terms-of-Service acceptance records (Section 8) are the one exception kept permanently, even after closure, since they're the evidence an agreement was formed.
Manual review. Some closure or deletion requests are routed for manual review rather than processed automatically — including where a contract tied to the account is actively in dispute, mid-signature, under a fraud or security investigation, or subject to a legal hold. You'll be notified if that applies to you and given an expected timeframe.
Pact keeps an internal record of each account closure and deletion request — what was deleted, what was retained, and why — for our own compliance and audit purposes.
You can update your name, password, and (where applicable) business details from Settings at any time, close your account yourself from the same page (see Section 6), and download a copy of your own profile data and the contracts you own or are a signing party to at any time using the "Download My Data" button in Settings. Where applicable law — such as the California Consumer Privacy Act or comparable state privacy laws — gives you the right to request access to, correction of, or deletion of your personal information beyond what account closure and self-serve export already cover, submit that request to privacy@pactappstore.com; we will respond within the time required by applicable law. We may deny or limit a request to the extent retention is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or as otherwise permitted by law, including the contract-retention period described in Section 6.
When you check the box to accept Pact's Terms of Service (at signup, and again if the Terms materially change), we record which version you accepted, when, the IP address you accepted from, and how (e.g., the signup checkbox). This is kept as permanent evidence that the agreement was formed and is never edited or deleted.
Passwords are hashed (never stored in plain text). Session cookies are httpOnly and, in production, HTTPS-only. Payment details never touch Pact's servers — they go directly to Stripe. That said, no system is perfectly secure, and we can't guarantee absolute security of information transmitted to or stored by the Service.
Pact is not directed at, and does not knowingly collect information from, anyone under 18 — consistent with the Terms of Service's eligibility requirement (Section 2).
We may update this Privacy Policy from time to time. Material changes will be communicated the same way Terms updates are — see the Terms of Service, Section 19.
Questions about this policy, or a request regarding your data: privacy@pactappstore.com