Privacy Policy

Pactra (“we,” “our,” or “us”) is operated by Limited Holdings LLC. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our contract analysis platform at pactra.ai (the “Service”). We are committed to protecting your privacy and handling your data transparently.

Account Information: When you create an account, we collect your name and email address through our identity provider, Clerk.

Payment Information: When you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, bank account number, or other sensitive financial data on our servers. Stripe's privacy policy governs their handling of your payment information.

Contract Documents: When you upload a contract for analysis, we temporarily store the document to perform the analysis. Documents are automatically deleted from our storage within 90 days of upload.

Usage Data: We collect information about how you use the Service, including analysis history, feature usage, and interaction patterns. We also collect technical data such as IP address, browser type, device information, and access timestamps.

We use your information to provide and improve the Service, process your contract analyses, manage your account and subscription, communicate with you about your account or the Service, ensure the security and integrity of the Service, and comply with legal obligations. We do not use your uploaded contracts or analysis results to train, fine-tune, or improve any artificial intelligence or machine learning models. Your contract content is processed solely to deliver your individual analysis results.

Pactra uses third-party AI models (currently provided by Anthropic) to analyze your contract documents. Your contract text is transmitted to Anthropic's API solely for the purpose of generating your analysis. We use API configurations designed to minimize data retention by our AI providers. However, we cannot guarantee the data handling practices of third-party AI providers beyond our contractual agreements with them. Please refer to Anthropic's privacy policy for details on their data practices.

AI-generated analysis results may contain inaccuracies, omissions, or errors. Pactra's output does not constitute legal advice, and all findings should be independently verified by qualified professionals.

Uploaded contract documents are automatically deleted from our storage systems within 90 days of upload. Analysis results are retained in your account until you request deletion or your account is terminated. Account information is retained for the duration of your account and for a reasonable period thereafter for legal and operational purposes. You may request deletion of your account and all associated data at any time by contacting us through our contact page. We will process deletion requests within 30 days.

We implement industry-standard security measures to protect your data, including encryption in transit using TLS, encryption at rest provided by our infrastructure providers, access controls and authentication requirements, and hosting on infrastructure providers that maintain industry-standard security certifications including SOC 2 compliance. While we take reasonable measures to protect your data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

We use the following third-party service providers to operate the Service: Clerk (authentication and identity management); Stripe (payment processing); Anthropic (AI model provider for contract analysis); Cloudflare (content delivery and document storage); Render (application hosting); and Vercel (frontend hosting). Each provider operates under their own privacy policies and terms of service, which govern their respective handling of your data.

If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale of personal information; and the right not to be discriminated against for exercising your privacy rights. We do not sell your personal information. To exercise your rights, please contact us through our contact page.

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing, and port your personal data, as well as the right to object to processing. Our legal basis for processing personal data includes performance of a contract with you (providing the Service you requested), legitimate interests (improving and securing the Service), and consent (where specifically obtained). To exercise your rights, please contact us through our contact page.

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy legislation may have additional rights regarding their personal information, including the right to access, correct, delete, and opt out of certain processing activities. To exercise these rights, contact us through our contact page.

We use only essential cookies required for authentication and session management. We do not use advertising cookies, marketing trackers, or analytics services that track you across other websites. We do not sell your data to third parties.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date and, where practicable, by email.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please visit our contact page.