Legal
Privacy Notice
Last updated
In short
- Execute never receives your documents. They are processed and kept on your computer.
- agmt.legal sets no cookies and uses no analytics.
- We hold only what you give us to get access, to sign in, or to write to us.
- We don't sell personal data or use it for advertising.
Who we are
This notice explains what personal data Agmt collects through agmt.legal and through Execute at app.agmt.legal, why we collect it, where it is kept, and the choices you have. “Agmt”, “we” and “us” mean Agmt, which operates both. For anything in this notice, write to hello@agmt.legal.
Documents you use in Execute
Execute reads, sorts and assembles documents in your web browser. No agreement, signed page, stamp paper, file name or page text is sent to Agmt, and we cannot see them.
Your signings are saved in your browser's storage on the computer you used, where only that browser can reach them. Clearing the site data for app.agmt.legal deletes them. Text recognition for scans and photos runs on your computer; the recognition data it needs is downloaded from app.agmt.legal, and nothing is sent back.
What we collect
When you ask for access to Execute
Your name, your email address and, if you choose to tell us, what you sign most often.
When you have an Execute account
Your email address and name, your password in hashed form (we never store the password itself), whether your email address is confirmed, and the status of your access. Signing in sets a cookie on app.agmt.legal that keeps you signed in. It is needed for the service and is not used to track you.
When you send feedback from Execute
The kind of feedback, your message, your email address if you give it and, unless you untick the box, technical details: your browser's name and version string, the page you were on and the version of Execute.
When you write to us
Your email address and whatever you choose to write.
Earlier sign-up lists
Earlier versions of agmt.legal had a list for product updates and a form for people building legal technology. Both are closed. We keep what people gave there (name, email address and, where given, firm, role, product interests and update choices, or a product website and consent to be contacted) and use it only for what each form said.
Technical records
Our hosting providers process IP addresses and request details to deliver the websites, keep them secure and prevent abuse. Execute keeps a log entry for each access request and each decision on one.
How we use it
- To review access requests, and to give or end access to Execute.
- To run your account: signing in, confirming your email address, resetting your password.
- To email you about your request, your account and your access.
- To read and answer your feedback and messages, and to improve our products.
- To contact people on the earlier lists about what they asked for.
- To keep our services secure and working.
We process personal data with your consent, which you give when you send it to us, and for the other lawful purposes permitted by the Digital Personal Data Protection Act, 2023. We do not sell personal data, use it for advertising, or use it to train AI models.
Who else handles it
We use a small number of providers who process personal data for us, under our instructions:
- Vercel hosts agmt.legal.
- Cloudflare runs Execute, including its access list and logs.
- A managed Postgres database provider stores Execute accounts and the earlier sign-up lists.
- Resend sends Execute's emails.
- Our email provider receives messages sent to hello@agmt.legal.
Some of these providers may process data outside India. We share personal data with anyone else only when the law requires it.
How long we keep it
- Access requests and accounts: for as long as the request or account exists, and for a reasonable time afterwards to answer questions or meet legal obligations.
- Feedback and emails: for as long as we need them to deal with what you wrote.
- Earlier sign-up lists: until you ask us to remove you, or we no longer need them.
- Technical logs: for the short periods our providers keep them.
You can ask us to delete your data at any time (see “Your rights”).
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete, update or erase it;
- withdraw your consent, which stops future processing but does not affect what was done before;
- nominate someone to exercise these rights for you in the event of your death or incapacity; and
- have a grievance about our handling of your data addressed.
Write to hello@agmt.legal and we will respond within a reasonable time. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Security
We use encrypted connections, store passwords only in hashed form, limit access to the people who need it, and choose providers with strong security practices. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
Children
Our services are for legal professionals. They are not directed at children, and we do not knowingly collect children's personal data.
Changes to this notice
When our products or practices change, this notice will change with them. We will update the date at the top, and tell account holders about significant changes by email.
Contact
For questions, requests or grievances about your personal data, write to Agmt at hello@agmt.legal. See also our Terms of Use.