Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how DataThink LLC ("DataThink," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use KeepContracts, our document preparation, electronic signature, and contract management platform available at keepcontracts.com (the "Service").

1. Information We Collect

We collect the following categories of information, most of which you or your organization provide directly:

• Account information: name, email address, and password (stored as a secure hash, never in plain text).
• Organization data: your organization or team name, your role, and settings your administrators configure.
• Document content: documents, fields, recipients, and signatures you upload or create in order to use the Service.
• Usage data: IP address, browser type, device information, and pages visited, collected automatically to operate and secure the Service.

KeepContracts does not currently use third-party analytics or advertising tracking tools. If this changes, this Policy will be updated before any such tool is introduced.

2. How We Use Your Information

We use personal information to:

• Provide, operate, and maintain the Service, including document preparation, signing, and management;
• Create and authenticate your account and protect it against unauthorized access;
• Send transactional emails, such as document signing notifications and account alerts;
• Generate AI-assisted field and recipient suggestions, as described in Section 3;
• Respond to support requests;
• Monitor, secure, and improve the Service; and
• Comply with applicable legal obligations.

3. AI-Assisted Features

When you use AI-assisted field or recipient detection, the relevant document text and layout are sent to Google Cloud's Vertex AI (Gemini) service, which returns suggested fields or recipients. This processing is used solely to generate those suggestions. Google processes this information as our service provider, subject to its own data processing terms, and does not use it to train its own models.

4. Legal Bases for Processing (EEA/UK Users)

Where the GDPR applies, we process your personal data on the basis of: performance of a contract (providing the Service to you), our legitimate interests (securing and improving the Service, including AI-assisted features), and compliance with legal obligations.

5. How We Share Your Information

We do not sell your personal information. We share information only with service providers necessary to operate the Service — for example, hosting, email delivery, document conversion, and Google Cloud's Vertex AI (for AI-assisted features) — each under obligations to protect your information, or when required by law.

KeepContracts does not currently use a third-party payment processor. If billing is introduced in the future, this Policy will be updated to name the relevant provider before it is used.

6. Cookies and Similar Technologies

We use only essential cookies required for authentication and security, such as session cookies, and functional cookies to remember your preferences. We do not currently use advertising or cross-site tracking cookies.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Data Security

We use reasonable technical and organizational measures, such as encryption in transit, password hashing, and access controls, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your Privacy Rights

You can access and update much of your information directly through your account settings, and you can request deletion of your account at any time. Depending on your location, you may have additional rights to correct, restrict, or receive a copy of your personal data, and to object to certain processing.

• EEA/UK (GDPR): the rights above, plus the right to lodge a complaint with your local data protection authority.
• California (CCPA/CPRA): the right to know what personal information we collect, request its correction or deletion, and not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

To exercise these rights, contact us at mangelsona@datathink.dev.

10. International Data Transfers

We are based in the United States, and our infrastructure providers process and store information there. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for transfers of personal data from the EEA, UK, or other jurisdictions with data transfer restrictions.

11. Children's Privacy

KeepContracts is not intended for use by anyone under 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be communicated before they take effect. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at mangelsona@datathink.dev.