How does iContract create agreements?

iContract offers fixed agreement templates that use the facts you provide and do not require AI. For specialty agreements without a fixed template, iContract can offer clearly labeled optional AI-assisted drafting.

Does iContract guarantee that an agreement is enforceable?

No. iContract is software, not a law firm, and it does not provide legal advice or guarantee that any agreement is valid or enforceable in a particular jurisdiction. Consider qualified legal review for high-stakes or jurisdiction-specific matters.

How much does a contract generator cost?

iContract offers a free tier for basic contract generation. Premium plans start at affordable rates for unlimited contracts, e-signatures, and advanced features like risk scanning and compliance monitoring.

Privacy Policy | iContract

Last updated: October 7, 2026

1. Information We Collect

Information You Provide

Account information: Email address, name, and password when you create an account
Contract data: Party names, contract terms, scopes, payment details, jurisdiction selections, and other information you enter when generating contracts
Uploaded documents: Contract text, images, or files you upload for analysis via the Risk Scanner / Contract Evaluator
Signatures: Electronic signature data (drawn, typed, or uploaded) when signing contracts
Compliance data: Business type, location, and regulatory information submitted for compliance monitoring
Account and service information: Details needed to support service-related requests and records

Information Collected Automatically

Usage data: Pages visited, features used, contracts generated, time spent on the Service
Device information: Browser type, operating system, screen resolution, device identifiers
Log data: IP address, access times, referring URLs, language preferences
Location data: Approximate location based on IP address (not precise GPS)

2. How We Use Your Information

To provide, maintain, and improve the Service, including generating contracts and analyses
To deliver requested services and send related notifications
To send service-related communications (account verification, security alerts, product updates)
To detect, investigate, and prevent fraudulent or unauthorized activity
To comply with legal obligations in applicable jurisdictions
To analyze usage patterns and improve service reliability and product quality using aggregate or de-identified information where appropriate

3. AI Processing & Data Sharing

Many iContract agreement templates are deterministic: the Service inserts the facts you provide into fixed template wording without sending that drafting step to an AI model. When you intentionally use a clearly labeled AI-assisted feature, such as specialty drafting, document analysis, or an AI assistant, the information needed for that request may be sent to a configured third-party AI provider. Declining optional AI processing does not prevent you from using deterministic template features.

What Data Is Sent

AI-assisted contract inputs: When you choose an AI-assisted drafting or analysis feature, relevant party names, terms, scope, payment details, jurisdiction, and other information you provide may be included in the request. Deterministic fixed-template rendering does not require AI processing.
Uploaded documents: Full text and/or images of contracts, PDFs, and photos you submit for risk scanning, document analysis, or field detection
Chat messages: Questions, descriptions, and context you provide to AI assistants including the AI Chatbot, Negotiation Advisor, and Legal Term Explainer
Business information: Business type, location, industry, and other details submitted for compliance monitoring, business name generation, or structure recommendations

Who Receives Your Data

Google (Gemini models): May process information when you invoke an AI-assisted feature configured to use Gemini, such as document analysis, risk scanning, or specialty drafting. Google Gemini API Terms
OpenAI (GPT models): May process information when you invoke an AI-assisted feature configured to use OpenAI for text generation or analysis. OpenAI API Data Usage Policy

How Your Data Is Protected

iContract model training: We do not intentionally use your specific contract data, uploaded documents, or personal information to train iContract-owned AI models.
Provider handling: Third-party AI providers process requests under their applicable API terms, privacy commitments, and retention settings. The provider links above contain the current details.
Uploaded documents: We limit document processing to the purposes described in this policy and retain data according to the retention section below.
Consent required: The app requests your explicit consent before sending any data to AI services. You can decline and still use non-AI features.

4. Data Sharing

We do not sell your personal information. We may share information with:

Service providers: Third-party services that help us operate the platform, including hosting, AI processing, email delivery, and analytics
Contract counterparties: When you send a contract for signature, the recipient can view the contract details and associated metadata
Legal compliance: When required by law, court order, subpoena, or governmental authority in any applicable jurisdiction
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity

5. International Data Transfers

iContract operates globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place for such transfers, including:

Standard Contractual Clauses (SCCs) approved by the European Commission for EU/EEA data transfers
Compliance with applicable data transfer mechanisms required by local law
Data processing agreements with all third-party service providers

6. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Access controls with role-based permissions
Regular security assessments and penetration testing
Row-level security policies on all database tables

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

Account data: Retained until you request deletion
Generated contracts: Retained until you delete them or close your account
Uploaded documents for analysis: Deleted from processing servers within 24 hours of analysis completion
Usage logs: Retained for up to 90 days
Service records: Retained as required by applicable operational and legal obligations

You can request deletion of your data at any time by contacting us. We will process deletion requests within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Export your data in a machine-readable format
Restriction: Restrict processing of your data
Objection: Object to processing based on legitimate interests
Withdraw consent: Where processing is based on consent

For EU/EEA residents: These rights are provided under the GDPR. You may also lodge a complaint with your local Data Protection Authority.

For California residents: Under the CCPA/CPRA, you have additional rights including the right to know what personal information is collected, the right to opt out of the sale of personal information, and the right to non-discrimination.

For Brazilian residents: Under the LGPD, you have rights including confirmation of processing, access, correction, anonymization, portability, and deletion.

For Mexican residents: Under the LFPDPPP, you have ARCO rights (Access, Rectification, Cancellation, and Opposition).

9. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies. You can control cookies through your browser settings.

10. Children's Privacy

The Service is not intended for children under 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect information from children. If we discover we have collected information from a child, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Service at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.

12. Contact & Data Protection Officer

For privacy-related questions, to exercise your rights, or to contact our Data Protection Officer:

Email: privacy@icontract.pro
Subject line: Include "Privacy Request" and your jurisdiction

We will acknowledge your request within 5 business days and respond substantively within 30 days.