Privacy Notice

1. Scope

This Privacy Notice explains how Mutual Assent AI handles personal information when you visit the site, create an account, prepare or negotiate an agreement, sign, contact us, or direct an AI agent to use the service. The service is a free beta and is not intended for children under 18.

2. Information we collect

• Account and authentication data, including email address, one-time-code events, and session identifiers.
• Agreement data, including party and company names, addresses, signatory names and titles, email addresses, agreement terms, redlines, approvals, signatures, timestamps, and negotiation history.
• Security and technical data, including IP address, browser or user-agent information, request logs, device information, and security events. Signature records may include IP address and user-agent information.
• Communications you submit through the contact form, including your name, email address, and message.
• Agent activity recorded by the service, such as whether an action was performed by a human or an agent. Private conversations and instructions inside your agent interface are not sent to Mutual Assent AI unless you or the agent place them into the service.

3. How we use information

• Provide accounts, agreement creation, review, redlining, approvals, signatures, access links, downloads, and notifications.
• Authenticate users and signatories; attribute actions; maintain versions, audit records, and execution evidence.
• Respond to contact requests and provide service communications.
• Prevent abuse, investigate errors, secure the service, and comply with legal obligations.
• Understand aggregate service usage and improve the beta. We do not sell personal information or use agreement content for behavioral advertising.

4. Service providers and disclosures

We use service providers to operate the beta, including Vercel for hosting and request processing, Supabase for database and authentication services, and Resend for transactional email. They process information under their own terms and privacy practices. We may also disclose information when required by law, to protect rights or security, with your direction, or as part of a merger, financing, acquisition, reorganization, or sale of assets. We do not disclose agreement content to unrelated third parties for their own marketing.

5. Retention

We retain account information, agreements, version history, signature records, and audit events while needed to provide the beta, preserve execution evidence, meet legal obligations, resolve disputes, and protect the service. Contact messages may be retained as long as needed to respond and maintain business records. Backup copies and security logs may remain for a limited period after deletion. Because the beta may change or end, you should download and keep your own executed agreements.

6. Security

We use reasonable administrative and technical safeguards designed for the nature of the beta, including access controls, encrypted network transport, hashed private-link tokens, and restricted service credentials. No service is perfectly secure. You are responsible for protecting one-time codes and private agreement links and for promptly reporting suspected unauthorized access.

7. Your choices and rights

You may request access, correction, or deletion of personal information by using the contact form. We may need to verify your identity and may retain information required for legal obligations, fraud prevention, security, dispute resolution, or preserving the integrity of signed agreement records. Depending on where you live, you may have additional privacy rights and a right to appeal or complain to a regulator. The service does not currently respond to browser opt-out signals because it does not sell personal information or use it for cross-context behavioral advertising.

8. International use

The service and its providers may process information in the United States and other countries. If you use the service outside the United States, you understand that information may be transferred to jurisdictions with different data-protection laws. Do not use the beta where doing so would violate applicable law or professional duties.

9. Changes and contact

We may update this notice as the beta changes. The effective date above identifies the current version. Contact us through the contact page with privacy questions or requests.