Privacy

• Account: your name, email, company, role and signing mark.
• Sign in with Google (optional): Google tells us your name, email address, that Google has verified it, and your Google account ID. We use them only to sign you in and match you to your account and invitations. We never get your Google password, contacts, files or anything else in your Google account, and we don’t share this data.
• Contracts: the rooms, versions, changes, comments, files and signatures you and the other side create.
• Lex: the messages you send Lex and its answers.
• Signing record: who signed which version, when, the consent shown, IP address and browser.
• Usage: which features you use and basic device information, to keep the service working and improve it. Never the words of your contracts.
• Errors: technical crash details (error type, stack trace, release) sent to our error monitor, Sentry. Never contract or clause text, Lex messages, emails, request bodies or cookies.

To run the service you asked for (the contract with you), to keep it secure, to meet legal duties such as keeping a signing record, and, for usage data, our legitimate interest in making the product better.

• Pro, Team and Enterprise: never. Nothing you or the other side write is used to train AI or improve the product beyond running the service. Once you’ve been on Pro, that stays true for past and future content, even after a downgrade.
• Free and Plus: de-identified content from your own side (your drafts, edits, Lex chats and playbook) may be used to improve Lex and the product. We remove names, emails and other identifying details first, never sell it and never show it to other customers.
• The other side’s content is never used, unless they have their own Free or Plus account and are writing for their own organisation. Guests are never included.
• Accounts created before 26 October 2026 are never used.
• Today nothing is trained on: there is no training pipeline yet.

We rely on legitimate interests for this. De-identification lowers the risk but can’t remove it, so you can object any time: switch off Data use in Settings › Data & privacy (it takes effect straight away, and content already collected is excluded too), or write to privacy@contracts.io.

• The other side sees only what you send them. Staged changes, internal notes, your playbook and your Lex chats stay on your side.
• In a workspace, owners and admins can see the company’s rooms.
• Our processors (hosting, email, AI model providers, error monitoring) see only what they need, under contract and no-training terms.
• We never sell your data.

The Contracts.io extension for Chrome helps you read a contract on any page with Lex.

• It reads only the page you ask it about, when you ask (for example by pressing “Read with Lex”). It does not read pages in the background or record your browsing.
• What it reads is sent to Contracts.io to check against your playbook and is not kept unless you save it to a room.
• Nothing is stored beyond your rooms: no browsing history, no page content after the answer, no cookies from other sites.
• It signs in with your Contracts.io account and can stage changes, never send or sign on its own.
• Remove it at any time from your browser; disconnect it in Settings › Connected apps.

Your data is stored in the EU (Postgres in the EU at launch). Where a processor is outside the UK or EU, we use the safeguards the law requires.

Rooms are kept until you delete them or your account. Signed documents and their audit trail stay as the legal record of what was signed. Lex chats in a guest link end with the link.

You can see, export, correct and delete your data. Export everything from Settings › Data; delete your account there too (there is a 7-day grace period, then it is purged). You can also object, restrict processing, or complain to the ICO. Write to privacy@contracts.io.

See Cookies and How Lex works.