Privacy Policy

Welcome to Contractso. We are committed to protecting your personal data and maintaining full transparency about how your information is processed. This policy outlines our data practices in compliance with GDPR and global e-signature regulations.

1. Data Infrastructure

We believe in high-performance and secure data management. Our infrastructure is organized as follows:

• Primary Hosting: Our platform and databases are hosted on Hostinger servers located in Germany (EU), ensuring that all document data remains within the European Economic Area.
• Email Communications: All transactional emails and contract notifications are sent directly through our own secure infrastructure to maintain maximum control over delivery and data privacy.

2. Sub-processors

To provide a seamless experience, we partner with industry leaders for specific functionalities:

Entity	Purpose	Location
Hostinger	Cloud Hosting & Data Storage	Germany (EU)
Stripe	Secure Payment Processing	United States
Twilio	SMS Verification & Notifications	United States / Global
Internal Infrastructure	Email Delivery System	Germany (EU)

3. Information We Collect

A. Audit Trail Data

As required by the eIDAS and ESIGN Act, we collect metadata to ensure the legal validity of every signature:

• IP addresses and device identifiers.
• Browser types and operating systems.
• Detailed activity logs (viewed, signed, declined).

B. Account Data

We collect your name, email, and company details to manage your subscription and provide access to our template editor.

4. Payments

All financial transactions are handled via Stripe. Contractso does not store your credit card details on our servers; they are processed directly by Stripe's PCI-DSS compliant infrastructure.

5. Your Rights

Under GDPR, you have the right to access, port, and erase your data. Since documents are hosted in Germany, you benefit from some of the strictest data protection laws in the world. To exercise these rights, contact us at [email protected].

6. Security Measures

We use industry-standard AES-256 encryption for documents at rest and TLS for data in transit. For more details, see our Security Page.