Privacy Policy

GetAgreements ("we", "our", or "us" in this Privacy Policy) is committed to maintaining the privacy of the information of our subscribers and other users of our products and services.

In the course of our business dealings or our operation of the GetAgreements website and services (the " Service"), we may collect, use, disclose, and hold information about identified or identifiable persons (" Personal Information"), as well as other business or technical data.

This Privacy Policy describes how we collect, use, store and distribute Personal Information and other data, and the purposes for which we may use, disclose or hold such Personal Information and other data. We operate in the United States.

Information that we collect

We may collect the following information during the course of our relationship with any organization that subscribes for the Service (" Subscriber ") or with any registered user of the Service (" User "), or as a result of the use of our Service by any User:

• Account details. Personal details during the course of establishing and maintaining a subscription or User account via the Service, such as Subscriber and User names, account identifiers, login and password details, and contact details (addresses, email addresses, phone numbers).
• Billing details. Subscriber billing information (e.g., payment method, billing address). Card data is handled by our payment processor; we do not store full card numbers.
• Content you provide. Information inputted or uploaded by Users into the Service (including document inputs, prompts, chat messages, files, and other User Content). This may include Personal Information about Subscribers, Users, or other people.
• Project and document data. Details relating to the establishment and maintenance of any documents or projects within the Service, including settings, versions, and activity history.
• Usage data. Data about a User's interaction with the Service (e.g., features used, pages visited, timestamps, device/browser type, IP-based approximate location, error logs, and performance data).
• Messaging data. Personal Information and other data provided via any messaging or communication features of the Service (see Messaging and Contacts below).
• Third-party inputs. Data provided to us by third-party service providers a User engages via the Service (e.g., e-signature providers, identity or payment services), such as service details, fees, and status updates.
• Other information. Other Personal Information or data provided to us during the course of support, surveys, feedback, or other interactions reasonably necessary to provide the Service or respond to requests.

How we use Personal Information and other data

We will use, disclose and hold Personal Information and data collected by us for the following purposes:

• Operate the Service. To enable us and our agents and service providers to operate, maintain, and provide the functions and features of the Service (including AI-assisted drafting and chat, messaging, storage, collaboration, search, and e-signature integrations).
• Accounts and transactions. To establish and maintain Subscriber or User accounts; to complete transactions (billing, payment processing, refunds); and to provide administrative communications.
• Support and communications. To respond to User and Subscriber queries or requests; to provide support, troubleshooting, and notices related to the Service.
• Improvement and safety. For product development, quality assurance, analytics, security monitoring, fraud/abuse prevention, and service performance.
• Records and compliance. To maintain business records and comply with legal obligations.
• Marketing (opt-in). To keep Subscribers and Users informed about products, services, events, promotions or other marketing activities, but only to the extent permitted by applicable law and subject to your preferences.

AI processing

We process User Content to generate outputs you request.

We do not use your documents or chats to train third-party foundation models without permission. Where we use data to improve our own models, we do so in aggregated/de-identified form or with your opt-in and access controls.

Limited human review may occur to investigate abuse, ensure safety, or improve quality, under confidentiality obligations.

Our basis for processing Personal Information

We process Personal Information to provide and operate the Service, to fulfill contracts with Subscribers and Users, to pursue legitimate business interests (such as security, improvement, and fraud prevention), to comply with law, and—where required—for activities you opt in to (such as marketing emails or certain optional cookies). Where state privacy laws apply (e.g., Virginia, California), we honor applicable requirements and rights described below.

Cookies

Our Service may use cookies and similar technologies. "Cookies" are small text files placed on devices or browsers used to access the Service. We may use cookies to remember preferences and settings, keep you signed in, analyze traffic and trends, and understand how people use the Service.

Preferences & authentication cookies help the Service remember your settings and session.

Analytics & performance cookies help us understand usage and improve features.

You can change your browser settings to reject or limit cookies, but doing so may reduce functionality. Where required, we will request your consent for non-essential cookies.

Messaging and Contacts

We may collect Personal Information and other data during the use of any messaging or communication features of the Service. We use this information to deliver messages to intended recipients and to respond where messages are directed to us.

We may monitor or access messages as permitted by law to ensure compliance with our Terms of Service (including appropriate use) and may take appropriate actions if we believe those terms are violated, including referring content to law enforcement or regulatory authorities if we consider it appropriate to do so.

The Service may allow Users to grant other Users or parties access to particular projects or documents (e.g., as collaborators, reviewers, or signers). When you grant access, you authorize those parties to view or interact with information according to the access settings you select. If you do not wish to share information with a person, do not grant access.

User and subject data (aggregated use)

We may use or disclose data we collect about Users and other persons for purposes other than those expressly listed in this Policy only on an aggregated or de-identified basis, in a way that ensures no individual is identifiable from such data.

Marketing

We may use Personal Information and other data to send marketing or promotional information about our services or products (or those of trusted partners) only if you have expressly opted in. You can unsubscribe at any time using the "Unsubscribe" link in our emails or by contacting us at hello@getagreements.com.

We do not sell Personal Information to direct marketers.

Business acquisition

We may transfer Personal Information and other data in connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets. We will require the recipient to protect Personal Information in a manner consistent with this Policy.

Disclosure of information to third parties

We will not use or disclose Personal Information and other data collected from Users or Subscribers to third parties, except:

• to the extent reasonably necessary to achieve any of the purposes described in this Privacy Policy (including to service providers who act on our behalf under contract); or
• where we reasonably believe such use or disclosure is required or expressly permitted by applicable law, regulation, legal process, or to protect rights and safety.

We do not sell personal information or share personal information for cross-context behavioral advertising.

Holding Personal Information (retention)

We will not hold Personal Information and other data longer than reasonably required for the purposes for which we may lawfully use it, including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. User-deleted content is removed from active systems within a reasonable period, subject to backups and legal holds.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information and other data from loss or unauthorized access, use, modification, or disclosure (including encryption in transit, access controls, logging, and monitoring). No method of transmission or storage is completely secure.

Transfer of information

We process data primarily in the United States and may use U.S. service providers in various states. If we engage a service provider outside your state or, where reasonably necessary, outside the United States, we will take appropriate steps to protect Personal Information consistent with this Policy and applicable law.

Use of third-party websites

If a User accesses any third-party websites or services via a link from the Service, they will leave the Service. Those third-party sites and services have their own privacy practices. We are not responsible for their content or their handling of Personal Information or other data.

Your rights (U.S. state privacy laws)

Depending on where you live (e.g., Virginia, California, Colorado, Connecticut, Utah), you may have rights to access, correct, or delete Personal Information, to obtain a portable copy, and to opt out of certain processing. To submit a request, email hello@getagreements.com with the subject line "Privacy Request – [Your State]" and describe your request. We will verify your identity before acting.

Virginia (VCDPA) appeal: If we deny your request, you may appeal by replying "Appeal." We will respond within 60 days with our decision and information about contacting the Virginia Attorney General if you remain unsatisfied.

Non-discrimination: We will not discriminate against you for exercising your privacy rights.

We currently do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes that would require a "limit" link under California law.

Amendments to this Privacy Policy

We may change this Privacy Policy at any time by changing or removing existing terms, adding new ones, or replacing this Privacy Policy with a new one. We will take reasonable steps to notify Subscribers and Users of any changes. Any changes take effect when posted unless we state otherwise. Your continued use of the Service after changes means you accept the updated Policy.

Contact

For any queries or further information about this Privacy Policy, please contact us:

hello@getagreements.com

Agreements, 1285 Enterprise Dr., Lynchburg, Virginia 24503, USA