Version 1.0.
Effective as of January 1, 2020.

Data Protection Policy (Global)

The Policy is applied to users globally regardless of territory, except for the users for whom we have separate policies. You can check the documents here.

The Policy is applied when the user (“you”) uses our website (www.contract.one, the “Website”) or our software (Contract.one platform, the “Software”).

This policy (the “Policy”) of Contract.one, Inc (the “Company”, “we”) describes how we process personal data.

Purpose and scope

Integrity and confidentiality: we always process personal data securely.

Storage limitation: we don't store personal data for longer than we need to;

Where necessary for the lawful basis on which data is processed, steps shall be put in place to ensure that personal data is kept up to date.

The Company shall take reasonable steps to ensure personal data is accurate.

Accuracy: we make sure that any personal data we hold is adequate and accurate.

The Company shall ensure that personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Data minimization: we don't process any more data than we need.

Purpose limitation: we only process personal data for the specific reason we collected it and nothing else;

Lawfulness, fairness, and transparency: we obey the law; only process personal data in a way that people would reasonably expect; always are open about our data protection practices;

The Company complies with the following principles:

Our Principles

Personal data from third parties

Cookies, pixel tags and other similar technologies data

Data from your device and log files

Content

Account information

We may receive personal data about how you use the Website from third parties (for example, from providers of online marketing services). Such Information can be statistics of using the Website, the ways, how you get to the Website etc.

Another user may provide us with your email to invite you to use the Software.

Pixel tags are small pieces of code, which we may embed on the Website and to emails. They allow us to understand, for example, when you opened our email and if you are actually notified about personal data that is important to you.

You can set up your browser not to accept cookies, but this may limit your ability to use the Software or break it.

cookies are small files, which identify you as a unique user by storing certain information about you, for example, login information or your preferences.

the device and the browser you use, IP address, internet provider, the time you visited the Website, which pages you visited on the Website, which Software features you used etc.

documents, messages, comments etc., which you upload.

personal data, which you give us when register or manage the account — for example, your name, email, photo, payment information (if applicable).

Details

Information Type

Data we process

any member of our group (subsidiaries, corporate affiliates, if any).

any third party, which is involved into change of our business (merger, acquisition etc.);

any third party, which is specified by other Software user who has lawful access to your personal data, for example when another Software user has access to the same project as you do, and has enough rights to invite a new user to that project;

protect our rights;

prevent a fraud against users or us;

to comply with the law;

any third party if we reasonably consider the disclosure necessary —

The Policy is not applied to any third parties’ software (if any). Please, study such third parties’ privacy policy;

The Software feature may be available, which on demand allows to integrate the Software with third parties’ software. We may share personal data with such third parties if you or other Software user ask for such integration.

integrated services providers.

When you use the Website, such software may collect personal data about your online activities on other websites and over time;

trusted services providers — for example, providers of the analytical software, which allows to search vulnerabilities.

It is necessary to arrange communication between the users. For example, your name and photo are automatically displayed when you comment a contract;

with other users.

We may share personal data:

With whom we may share information

However, any data transmission via the Internet is not 100 % secure. So, we do not warrant the security of personal data you transmit to or from the Software, and you do it at your own risk.

Appropriate back-up and disaster recovery solutions shall be in place.

When personal data is deleted this should be done safely such that the data is irrecoverable.

Access to personal data is limited to personnel who need access and appropriate security should be in place to avoid unauthorised sharing of information.

We make sure that personal data is stored securely using modern technology that is kept-up-to-date.

Security of personal data is important for us. We do our best to protect Information from unauthorized access, destruction, use, modification or disclosure.

Security

The Company shall also send the notice to the relevant state authority if the breach of security affects more than 500 residents of such state, as well as to the other authorities as required by the law applicable to the breach.

In case of determination of the breach of security, the Company shall provide notice of any breach of security to all the Software users that were affected by such breach. We will send the notice to the users’ email addresses that saved in the Software within 72 hours after we determine the breach.

Breach

Please contact us at security@contract.one if you feel something is not addressed in the Policy or have further questions.

Contact

You may provide us with feedback about the Software. You grant us a perpetual, irrevocable, worldwide, royalty-free license to use such feedback in any manner.

Feedback

comply with our obligations, resolve disputes, enforce our agreements.

to provide you with the Software; or

we need personal data —

your account is active; or

We will retain personal data for as long as:

Retention

Your account Information
(Clause 3.1)

Your comments to the documents (Clause 3.2)

please, log in to your account and go to the settings page.

just click the comment and change the text. Some changes may be limited to keep transparency and honesty of communication between the users.

How to update

Personal data you can update

Updating Information

Storage, processing and transmission of personal data are governed by the law of the State of Delaware.

Governing Law

You may set up do not track feature for your browser, which allows to avoid tracking your interactions with third parties’ websites over time. However, the Website currently does not respond do not track signals from browsers.

Do Not Track

We may from time to time send you emails, for example, about new Software features. You can opt out at any time by clicking the unsubscribe link in any email.

Opt Out from Commercial Emails

If you do not accept the changes to the Policy, please, stop using the Software. If you use the Software subject to invitation from the Customer, please, instruct the Customer to ask us to remove personal data it controls.

We may change the Policy and if the changes are significant, we will notify you by email in a timely manner.

Changes to Policy

Other provisions

Anton Vashkevich,
President and CEO