Privacy Policy

Summary

This website sets no cookies, runs no analytics and loads no third-party scripts. We collect personal data only when you email us or use the Pactone service, and we never use customer contracts to train shared AI models.

Who we are

Pactone (pactone.ai) is operated by Pactone AI Private Limited (“Pactone”, “we”, “us”). This policy explains how we handle personal data when you visit pactone.ai, try the live demo at dev.pactone.ai, contact us, or use the Pactone service.

For questions about this policy or to exercise your rights, email ask@pactone.ai with “Privacy request” in the subject line.

Visiting this website

pactone.ai is a static website. It sets no cookies, uses no analytics or advertising tools and loads no fonts, scripts or images from third parties.

Like any website, our hosting provider, Amazon Web Services, receives technical data needed to deliver pages to you: your IP address, browser type, the page requested and the time of the request. AWS uses this data to deliver the site and protect it from attacks. We don't use it to identify or profile visitors.

Data we collect

We collect personal data only in these situations:

When you email us. Your name, email address, organisation and whatever you choose to tell us, used to reply, arrange a walkthrough or prepare a quote.
When you create an account. Name, work email, organisation, role and sign-in details. If you sign in with Google, we receive your name and email address from Google.
When you use the service. The contracts and related content you upload, and activity records such as approvals, edits and sign-ins, which form the audit trail.
When you pay. Billing contact and company details. Card payments are handled by our payment provider; we don't see or store full card numbers.

How we use it

To provide, secure and support the Pactone service.
To answer enquiries, run pilots and send quotes.
To bill for paid plans and meet tax and accounting obligations.
To send service notices, such as security alerts and changes to these terms. We don't send marketing email unless you ask for it, and you can stop it at any time.

We rely on your consent, on the need to perform our contract with you or your organisation, and on our legitimate interest in running and securing a business service. We don't sell personal data.

Contract data and AI

When an organisation uploads contracts to Pactone, that organisation controls the data and we process it on its instructions, under our customer agreement and, where requested, a data processing agreement.

Customer data is never used to train shared AI models.
AI processing is ephemeral, as described on our security page.
Each customer's data is isolated with row-level security, encrypted with AES-256 at rest and protected with TLS 1.2 or higher in transit.

Please don't upload real or confidential contracts to the public live demo. Use the sample contracts provided, or ask us for a private pilot workspace.

We use a small number of service providers to run Pactone. They process data only on our instructions:

Amazon Web Services, for hosting, storage and backups.
Our payment processor, for subscription billing.
Google, if you choose to sign in with a Google account.
AI model providers that a customer chooses to enable for its workspace.

We share data with authorities only where the law requires it. A current list of sub-processors is available on request and is included in our data processing agreement.

Where data is stored

Pactone runs on AWS. Customer data stays in the AWS region agreed with the customer, and we don't replicate it to other regions automatically. Enterprise customers can discuss data residency options with us.

How long we keep it

Emails and enquiries: for as long as needed to respond and maintain the business relationship, then deleted.
Account and contract data: for the life of the subscription. After it ends, we return or delete customer data as set out in the customer agreement.
Audit trail: seven years by default, so customers can meet their own record-keeping duties. Customers can agree a different period.
Backups: rotated on a schedule of 30 to 365 days depending on the plan.
Billing records: as long as tax law requires.

Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR, you can ask to:

access the personal data we hold about you;
correct or update it;
delete it, where we have no legal reason to keep it;
withdraw consent you have given;
object to or restrict certain processing, or receive your data in a portable format;
nominate another person to exercise your rights if you die or become unable to.

Email ask@pactone.ai. We reply within 30 days. If your data sits in a customer's workspace, we'll pass your request to that customer and help them respond.

Grievances

If you have a concern about how we handle your data, email ask@pactone.ai with “Grievance” in the subject line and our grievance officer will respond. If you are not satisfied with our answer, you can complain to the Data Protection Board of India or, in the EU or UK, to your local data protection authority.

Security

We protect data with tenant isolation, policy checks on every request, encryption at rest and in transit, and an append-only audit trail. See our security page for details and current compliance status. To report a vulnerability, email security@pactone.ai.

Children

Pactone is a business service and is not intended for anyone under 18. We don't knowingly collect data from children.

Changes to this policy

We'll update this page when our practices change and show the date of the latest version at the top. If a change materially affects how we use customer data, we'll tell account administrators by email before it takes effect.