1. Information We Collect
When you use Pactra, we collect information you provide directly:
- Account information: Name, email address, workspace name.
- Agreement data: Documents you upload, agreement metadata, signer information.
- Usage data: API requests, signing sessions, feature usage.
- Technical data: IP address, browser type, device information.
2. How We Use Your Information
- Provide, maintain, and improve the Pactra platform.
- Process agreement signing sessions and generate signature receipts.
- Send transactional emails (signing invitations, notifications).
- Enforce usage limits and billing.
- Detect and prevent fraud, abuse, or security incidents.
- Provide AI-powered features (agreement summarization, clause extraction).
3. Data Storage & Security
Your data is stored securely using industry-standard practices. Documents are stored in encrypted object storage (Cloudflare R2). All data in transit is encrypted via TLS. API keys are hashed with SHA-256 before storage. Signature receipts include cryptographic hashes for tamper detection.
4. Data Sharing
We do not sell your personal information. We share data only with:
- Service providers: Infrastructure (Vercel, Supabase, Cloudflare), email (Resend), AI processing (OpenRouter).
- Signers: When you send an agreement, signers receive the agreement details and signing links.
- Legal requirements: When required by law, subpoena, or legal process.
5. AI Processing
Pactra uses AI models to provide summarization and analysis features. Document content may be sent to third-party AI providers (via OpenRouter) for processing. AI-generated outputs are advisory and do not replace legal review. You can choose not to use AI features.
6. Your Rights
You may:
- Access, update, or delete your account information.
- Export your agreement data.
- Revoke API keys at any time.
- Request deletion of your account and associated data.
7. Data Retention
We retain account data for the duration of your account. Agreement data and signature receipts are retained for the legally required period or as needed to support the audit trail. You may request deletion at any time.