Privacy Policy

1. Data We Collect

• Account data: name, email address and profile photo, department, job title and role, including data received from Google or Apple when you choose to sign in with them. With Sign in with Apple you may hide your email address.
• Organization and team data: your portal (company or individual) details such as legal and trading name, registration and tax numbers, address, contact details and logo, and the names and email addresses of team members you invite.
• Contract content: contracts, templates, clauses, versions, comments, approvals, workflows, obligations, projects and documents you create or upload.
• Counterparty data: names, contact details and roles of counterparties and their contacts, and KYC/AML files and company documents you request or receive.
• Respondent portal data: when you respond to a request, your company passport details, the documents you share and your comments and responses.
• E-signature evidence: signatory name and email, the signature image, date and time, IP address and signing status.
• AI feature data: documents and text you send to AI extraction, risk analysis or the assistant.
• Billing data: plan and subscription status. Card and bank details are handled by our payment providers and are not stored by us.
• Technical data: usage and activity logs, device and browser information needed to run and secure the Service.

We do not collect your precise location, contacts, camera or microphone data. We do not use advertising SDKs and do not track you across other companies' apps or websites.

2. How We Use Your Data

• To provide the Service: store and manage your contracts, run approvals and signatures, and send the notifications and reminders you set up.
• To run shared portals, team access and the respondent portal.
• To produce AI extraction, risk analysis and assistant answers when you ask for them.
• To keep a verifiable record of electronic signatures for all parties to a contract.
• To process subscriptions and payments made on our website.
• To keep the Service secure, prevent abuse and fix problems, and to comply with legal obligations.

We do not sell your personal data.

3. Who Sees Your Data

Members of your portal see the portal's contracts and data according to their permissions. Counterparties and signatories you send a contract to see that contract and its signature status. When you act as a respondent, the requesting party sees the information you share with them.

4. Service Providers

We share data only with providers that help us run the Service, under contracts that limit how they use it: our hosting and database platform (Base44), sign-in providers (Google, Apple), email delivery, AI model providers that process AI requests, and payment providers (such as PayPal) for purchases made on our website. Data may be processed in the United States and other countries where these providers operate.

5. AI Features

When you use AI extraction, risk analysis or the assistant, the relevant document text is sent to an AI model provider to generate the result. AI-generated content may contain errors and is not legal or financial advice. Please do not include sensitive data you do not want processed.

6. Data Retention

We keep your data while your account is active. When you delete your account, we delete your personal data as described below. Subscription, payment, invoice and partner commission records are kept for as long as required by tax and accounting laws. Signature evidence on contracts signed by other parties is kept for as long as the contract record exists, because those parties rely on it.

7. Deleting Your Account

You can delete your account at any time in Settings → Account → Delete account, or in the respondent area under Company Passport, on the website or in the app. Deletion is permanent and cannot be undone:

• Your user account and personal data are deleted.
• If you are the only member of your portal, the portal and its contracts, counterparties, contacts, KYC files, templates and other data are deleted. If other members use it, the portal stays with them and only your membership is removed (ownership passes to another member).
• Contracts already signed by another party are not deleted: their signature evidence and audit trail are kept, and your name and email as sender, editor or commenter are removed (anonymized). A signature you placed yourself stays part of that evidence.
• Billing and partner payment records are kept as required by law.

You can also ask us to delete your data by writing to support@mpnerds.com.

8. Your Rights

Depending on where you live (for example under the GDPR, UK GDPR, LGPD or US state laws), you may have the right to access, correct, export or delete your data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact support@mpnerds.com. You may also complain to your local data protection authority.

9. Security

We use encryption in transit, access controls and other reasonable measures to protect your data. No system is completely secure, so please keep your sign-in credentials safe.

10. Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their data.

11. Changes

We may update this policy. We will post the new version here and update the date above. Significant changes will be communicated in the Service or by email.

12. Contact

MP Nerds LLC — support@mpnerds.com