1. Purpose

At Contractli, protecting the personal data of our users is at the core of our operations. This Data Protection Policy outlines how we collect, process, store, and secure personal data in compliance with relevant data protection regulations, including the General Data Protection Regulation (GDPR).

2. Scope

This policy applies to all personal data processed by Contractli through our website, web application, and services. It governs the actions of all employees, contractors, and third-party vendors who have access to personal data processed by Contractli.

3. Data We Process

3.1 Types of Data Collected

• Account Information: Name, email address, company name, and contact details.

• Contract Data: Information uploaded to the platform, including contract documents, metadata, and associated files.

• Usage Data: Device information, IP address, browser type, and interactions with our platform.

3.2 How We Use Your Data

Personal data is processed to:

• Provide, maintain, and improve our services.

• Communicate with users regarding updates, support, and notifications.

• Ensure compliance with legal and contractual obligations.

4. Data Protection Principles

Contractli adheres to the following principles:

1. Lawfulness, Fairness, and Transparency: Data is processed lawfully and transparently.

2. Purpose Limitation: Data is collected for specified and legitimate purposes.

3. Data Minimization: We only collect data necessary for the intended purpose.

4. Accuracy: Data is kept accurate and up to date.

5. Storage Limitation: Data is retained only as long as necessary.

6. Integrity and Confidentiality: Data is secured against unauthorized access or processing.

5. Data Security Measures

We implement a comprehensive security framework to protect your data:

• Encryption: All data is encrypted both in transit (TLS/SSL) and at rest.

• Access Controls: Role-based access and multi-factor authentication are enforced.

• Regular Audits: Security measures are continuously monitored and audited.

• Backup and Recovery: Automatic backups ensure data integrity and availability.

6. User Rights

Under GDPR and similar regulations, users have the following rights:

• Access: Request a copy of personal data we hold about you.

• Rectification: Correct inaccurate or incomplete personal data.

• Erasure: Request deletion of your data (“Right to be Forgotten”).

• Portability: Receive your data in a structured, commonly used format.

• Restriction: Request limited use of your data.

• Objection: Object to data processing for direct marketing or legitimate interests.

• Withdraw Consent: Withdraw consent for data processing at any time.

To exercise these rights, contact us at:
Email: [Insert Support Email]

7. Data Retention Policy

Personal data is retained for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Specific retention periods include:

• Account Data: Retained until account deletion.

• Contract Data: Retained as per user’s preferences or until deleted by the user.

• Logs and Backups: Retained for [Insert Timeframe] for troubleshooting and compliance.

8. Third-Party Data Processors

We engage trusted third-party vendors to support our services, including hosting, analytics, and payment processing. All vendors are contractually obligated to comply with GDPR and other applicable data protection regulations.

9. Data Breach Response

In the event of a data breach, Contractli will:

1. Notify affected users and regulatory authorities within 72 hours.

2. Provide details of the breach, including impacted data and mitigation steps.

3. Take immediate action to secure systems and prevent further breaches.

10. Contact Information

For questions or concerns regarding this policy, please contact us:
Data Protection Officer (DPO): [Insert Name/Contact]
Email: [Insert Support Email]
Mailing Address: [Insert Company Address]

11. Policy Updates

We may update this policy periodically to reflect changes in regulations or our operations. Updated policies will be published on our website, and users will be notified of significant changes.