1. Who this policy covers
This policy describes personal information handled by eezpal (“Contracy”, “we”, “us”) when you use app.contracy.com, including when you sign as a recipient without an account. Other websites and services have their own policies.
We determine how account, security, support, and subscription information is used to run Contracy. For documents and recipient information provided by a workspace, the organization sending the document generally determines why that information is used, and we process it to provide the service on its behalf. Contact the sender about its own privacy practices or the contents of a document.
2. Information we receive
- Account and workspace details: your name, email address, password hash, confirmation and recovery information, workspace membership, roles, invitations, and settings. We store a password hash rather than your readable password. If you enable two-factor authentication, we store an encrypted authenticator secret and hashed recovery codes.
- Optional login details: when you choose Google or Microsoft login, we receive the provider identifier and profile information such as your name and email. Connecting a provider does not give us general access to your email inbox or cloud documents.
- Documents and signing information: uploaded originals and derived PDFs, templates, client profiles and contacts, matters and access permissions, comments and workflows, tasks and correspondence, retention and hold records, renewal schedules, recipient names and emails, messages, assigned fields, typed or drawn signatures, submitted values, and the original, unfilled, prepared, and completed files. We extract text from supported documents and offer optional OCR into a private search index so authorized workspace users can find documents. Email verification codes are stored as expiring hashes; access and execution events are recorded for security and evidence.
- Signing evidence: document hashes, event and signature timestamps, recorded consent wording and version, recipient details, and relevant IP address and browser information. Events include actions such as opening, signing, declining, cancellation, and completion.
- Billing and service records: workspace subscription and customer identifiers, plan and payment status, sending and storage usage, email delivery status, support correspondence, and operational or security logs. Dodo collects payment details in its checkout; the application does not collect full card numbers.
You provide information directly when registering, uploading, or signing. We also receive information from workspace owners, document senders, invited users, login providers you choose, and payment or delivery services.
3. How and why we use information
We use information to authenticate users, manage workspaces and permissions, prepare and deliver signing requests, display documents, record signatures and evidence, produce completed PDFs, send service emails, manage subscriptions and allowances, provide support, investigate failures, and protect against misuse.
Where a legal basis is required, we rely on performance of our contract for account and subscription services; legitimate interests in secure operation, fraud prevention, support, and reliable signing records; applicable legal obligations for required records or disclosures; and consent where required. For document content processed for a workspace, that organization is responsible for its own lawful basis and instructions. You can choose not to sign electronically by contacting the sender; withdrawing consent later does not invalidate processing that was already lawful.
Account and recipient details are needed to provide the corresponding service. If you do not provide required details or electronic signing consent, we may be unable to create your account or complete your signing request.
4. Who can receive information
Workspace owners and admins can access workspace documents; members normally access their own. Document senders and authorized recipients can receive completed documents and signing evidence. Those copies can include other signers’ submitted information and evidence needed to explain the signing process. Check a document before signing if you are unsure who will receive it.
We use service providers to operate the application: Cloudflare R2 for private file storage, Amazon SES for service email, and Dodo Payments for checkout and subscription management. Hosting and database providers process data needed to run the application. Google and Microsoft process login information only when you choose their login options. Providers receive information needed for their role and may also process information under their own policies, particularly when you interact directly with their checkout or login pages.
We may disclose information when legally required, to protect rights or safety, investigate abuse, or as part of a business transfer subject to appropriate protections. We do not sell personal information or use document contents for advertising. The application does not include advertising trackers or use document contents to train AI models.
5. Cookies and local storage
The application uses necessary session and security cookies to keep you signed in, protect forms, and maintain private recipient signing sessions. Choosing “Remember me” permits a longer-lived authentication cookie. The PDF viewer and fonts are served locally by the application. We do not currently include optional analytics or advertising cookies in the application.
You can manage cookies through your browser and sign out to end your session. Blocking necessary cookies can prevent account access or signing. External login and payment pages have their own cookie practices; this policy does not describe the separate marketing website.
6. Retention and deletion
Account and workspace information is retained while needed to provide the account and workspace. Requested account export archives expire after 24 hours and are removed by scheduled cleanup; downloaded copies remain under your control. Documents, templates, completed copies, and evidence remain stored until deleted through available controls or a verified deletion request is resolved. Request expiry, subscription cancellation, and downgrade do not automatically erase documents. The app currently permits deletion of drafts; contact us about other deletion or account-closure requests.
We assess retention using the continuing need to provide access, preserve a reliable signing record, resolve disputes, prevent fraud, meet legal recordkeeping obligations, and honor workspace instructions. A signed record may need to be preserved even if one participant requests deletion. Billing and security records may also be retained for those purposes after account closure. We will explain applicable limits when responding to your request.
Deletion from active systems may not immediately remove data in protected backups; retained backup copies are restricted to recovery and are removed through the backup lifecycle. Copies already downloaded or delivered to another party are controlled by that party. Keep your own copies of records you need.
7. Security and international processing
We use access controls, private file storage, password hashing, short-lived authorized download links, and HTTPS in production to help protect information. No internet service can guarantee absolute security. Keep credentials and signing links private, use secure devices, and report suspected misuse promptly.
Information may be processed in countries where our hosting, storage, email, payment, or login providers operate, which may differ from your country. Where applicable law requires transfer safeguards, these must be in place for the relevant processing. Contact us for information about the locations and safeguards that apply to your data.
8. Your choices and rights
You can download a ZIP of your account details and documents you created in currently accessible workspaces from Your data. Large PDF exports are split into ZIP parts of up to 250 MB; a data-only export is also available. Exports also include client profiles, saved document details, and renewal settings/history within their authorized scope. Workspace owners can explicitly request an export of the documents and templates in their workspace. Access and, for workspace exports, continued ownership are checked before downloading. Passwords, authenticator secrets, and recovery codes are excluded. You can update your profile and password in account settings, choose available login providers, download documents you are authorized to access, and cancel a subscription through Billing. Senders control request expiry and reminders. Recipients can decline a signing request and contact the sender to arrange another method.
Depending on applicable law, you may have rights to access, correct, delete, restrict, object to processing, receive a portable copy of your information, or withdraw consent where processing relies on it. Contact us to exercise these rights. We may need to verify your identity and authority before responding; do not send a password or private signing link. Where a workspace controls the information, we may refer the request to its owner or assist it in responding.
Rights can be limited by law, other people’s rights, or the need to preserve signing and transaction records. We respond within applicable legal time limits. You may also complain to the data protection authority with jurisdiction over your concern. Contracy is intended for adults who can enter binding agreements and is not directed at children.
9. Updates and contact
We will publish changes here with an updated effective date and give additional notice of material changes where required. If you have a privacy concern or need help making a request, contact us below.
eezpal · eezpal.com
Sri Lanka
For questions, billing concerns, or privacy requests, email info@eezpal.com. Please include the email associated with your account or signing request, but do not send passwords or private signing links.