Privacy Policy

Contravity is a commercial contract analysis service operated by a Latvian registered company. We are the data controller for personal data processed through this platform. If you have any questions about this policy or wish to exercise your data rights, you can reach us at support@pactumconsult.com.

When you create an account, we collect your email address and, if you sign in via Google, your name and profile picture as provided by Google. When you upload a contract for analysis, the text content of that document is processed to deliver the service and is stored in our database associated with your account. We also collect standard usage data such as scan timestamps, report status, and subscription information. We do not collect or store payment card details. All payment processing is handled by a PCI-DSS compliant third-party provider under their own privacy policy.

Contract text you upload is processed by third-party AI infrastructure in order to deliver the analysis. We also use anonymised and aggregated outputs to improve the accuracy of our internal clause library. We use your email address to send authentication-related communications such as sign-in links. We do not use your personal data for advertising purposes and we do not sell your data to third parties.

We process your personal data on the basis of contractual necessity (to provide the service you have signed up for), legitimate interest (to maintain and improve the platform), and consent (for optional cookies and communications where applicable). Where you are an EU or EEA resident, your rights under the General Data Protection Regulation (GDPR) apply in full.

Some of the third-party services we use to operate the platform are based outside the European Economic Area, including in the United States. Where personal data is transferred to countries that do not benefit from an EU adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure your data remains protected.

Scan reports and associated contract text are retained for the duration of your account. You may delete individual reports at any time from your account dashboard. If you close your account, your personal data will be deleted within 30 days. Billing records are retained for the period required by applicable tax law, which is typically seven years in Latvia.

We work with carefully selected third-party service providers to operate the platform, including providers of cloud infrastructure, authentication, payment processing, transactional email, and AI processing. Each provider acts as a data processor under our instruction and is bound by appropriate data processing agreements.

We use two types of cookies.

Essential cookies keep you signed in and allow the service to function. They are always active.

Analytics and advertising cookies help us understand how our website is used and measure the performance of our advertising. These include the Meta Pixel, provided by Meta Platforms Ireland Limited. They are set only if you accept them in our cookie notice, and you can withdraw your consent at any time through Cookie settings at the bottom of any page.

Under GDPR and applicable data protection law, you have the right to access the personal data we hold about you, to correct inaccurate data, to request erasure, to restrict or object to processing, and to receive your data in a portable format. To exercise any of these rights, contact us at support@pactumconsult.com. We will respond within 30 days. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) if you believe your data is being handled unlawfully.

All data is transmitted over HTTPS. Personal data is stored in encrypted infrastructure with access restricted to authorised personnel only. If you discover a security vulnerability, please disclose it responsibly by contacting us at support@pactumconsult.com.

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users. The date at the top of this page reflects the most recent revision. Continued use of the service after any update constitutes acceptance of the revised policy.