Pactable (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use the Pactable mobile application, website, and related services (collectively, the “Platform”). By using the Platform, you consent to the practices described in this policy.
1. Information We Collect
1.1 Information You Provide
| Data Type | When Collected | Purpose |
|---|---|---|
| Phone number | Account creation (inline during first agreement) | Account identity, SMS/RCS verification, passwordless sign-in |
| Name | Agreement creation (from device contacts or manual entry) | Identifying parties in agreements |
| Email address | When you send your first agreement or add one to your profile; counterparty email when provided | Delivering agreements and executed agreement PDFs; product and onboarding emails to account holders (see Section 3) |
| Agreement content | During voice or text conversation with AI | Structuring, storing, and delivering agreements |
| Voice input | When using voice conversation feature | Converting speech to text for agreement creation (transcribed by Apple’s iOS Speech Recognition; Pactable receives only the text, never the audio) |
| Counterparty contact information | During agreement creation (from device contacts or manual entry) | Delivering agreement notifications via SMS/RCS |
| Documents you share | When you share a document (such as a PDF form) into Pactable to fill and sign | Reading the document, helping you fill it in, and producing your signed copy. Documents can contain whatever the sender included, such as tax identification numbers. |
| Saved information | When you choose to save answers from a document you filled | Pre-filling future documents. You can view, edit, or delete saved information in your Profile. |
| Feedback | When you send a bug report or idea from the app | Investigating and fixing issues |
1.2 Information Collected Automatically
| Data Type | Purpose |
|---|---|
| Device information (device model, OS version, unique device identifiers) | Security, fraud prevention, audit trail for agreements |
| IP address | Security, approximate geolocation for audit trail |
| Biometric verification status (pass/fail — we do not store biometric data) | Identity verification for agreement execution |
| Timestamps (agreement creation, verification, sending, acceptance) | Audit trail, Certificate of Completion |
| Message delivery status (sent, delivered, read for RCS) | Ensuring agreement notifications are received |
| Usage data (screens viewed, features used, interaction patterns) | Improving the Platform |
1.3 Information We Do Not Collect
- Biometric data: Face ID verification is performed on your device by Apple’s secure enclave (native app) or via WebAuthn (Safari). We receive only a pass/fail result. We never receive, process, or store your facial geometry, fingerprint, or other biometric data.
- Audio recordings: Voice input is transcribed by Apple’s iOS Speech Recognition under Apple’s privacy policy. Raw audio is never transmitted to or stored on Pactable’s servers or sent to our AI providers.
- Full contact list: We access your device contacts only when you search for a counterparty during agreement creation. We do not bulk-upload or store your entire contact list.
2. How We Use Your Information
We use your information for the following purposes:
- Providing the Platform: Creating, storing, delivering, and managing agreements between parties
- Identity verification: Confirming your identity via phone number verification and biometric authentication
- Communications: Sending transactional SMS and RCS messages related to your agreements (delivery notifications, verification codes, acceptance/decline notifications, payment reminders), and sending account holders occasional product and onboarding emails, which you can unsubscribe from at any time
- Legal compliance: Maintaining audit trails and Certificates of Completion as required for E-SIGN Act compliance
- Security: Detecting and preventing fraud, unauthorized access, and other security threats
- Improvement: Analyzing usage patterns to improve the Platform’s features and user experience
We do not use your information for advertising or sell your personal information to third parties.
AI Processing: Pactable uses AI service providers (Anthropic and ElevenLabs) to understand your conversation, draft agreements, read documents you share, and speak its replies. The app asks for your permission before any of your data is sent to them, and you can change your choice at any time. See Section 4.1 for exactly what is shared.
3. Communications and Messaging
Pactable sends transactional messages related to your agreements via SMS and RCS (Rich Communication Services). These messages include agreement delivery notifications to counterparties, one-time verification codes for account creation and sign-in, agreement acceptance and decline notifications, and payment reminders for loan agreements.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All messages are triggered by explicit user actions within the Platform. We do not send marketing or promotional text messages without your separate, explicit consent.
You may opt out of non-essential messages at any time by replying STOP to any message from Pactable. Opting out does not affect the validity of existing agreements. Standard message and data rates from your carrier may apply.
Message frequency varies based on your use of the Platform. For support, contact support@pactable.io or reply HELP to any message.
Email. Pactable emails you about your agreements (delivery, signatures, and executed copies). If you have a Pactable account, we may also send you occasional emails to help you get the most out of Pactable, such as getting-started tips and feature updates. Every one of these includes an unsubscribe link; unsubscribing does not stop emails about your agreements. We never send marketing email to counterparties who have not created an account.
4. Third-Party Service Providers
We use the following third-party services to operate the Platform:
| Provider | Service | Data Shared |
|---|---|---|
| Twilio | SMS/RCS messaging, phone number verification | Phone numbers, message content, delivery status |
| Postmark | Transactional email (agreement delivery and notifications) | Email addresses, message content, delivery status |
| Loops | Product and onboarding email to account holders | Email address, first name, account identifier |
| Anthropic (Claude API) | AI processing: agreement conversations and drafting, reading and filling shared documents, feedback triage | Conversation text, agreement terms and party details, shared documents and your answers, feedback text (see Section 4.1; not used for AI training) |
| ElevenLabs | AI voice (text-to-speech) | The text of Pactable’s spoken replies (see Section 4.1) |
| PostHog | Product analytics | Usage events (screens and features used), pseudonymous account identifier, device and app version |
| Supabase | Database, authentication, storage | Account data, agreement records |
| Vercel | Web hosting (counterparty experience, legal pages) | Standard web server logs |
| Apple | Face ID (on-device), Push Notifications | Notification tokens (biometric data stays on device) |
Each provider is bound by their own privacy policies and data processing agreements. We select providers that maintain industry-standard security practices and do not use your data for their own commercial purposes beyond providing the contracted services.
4.1 AI Processing
Some Pactable features are powered by third-party AI services. Before any of your personal data is sent to them, the app asks for your permission (“Allow Pactable to use AI?”). You can turn AI features on or off at any time in the app under Profile → About → AI features. We record your choice, and when it was made, with your account.
| Provider | What it receives | Why |
|---|---|---|
| Anthropic (Claude) | What you say or type while creating or editing an agreement, including names, amounts, terms, and contact details of people you choose from your contacts; the agreement terms and party details used to draft the document; documents you share into Pactable (page images and text, which can include sensitive details such as tax identification numbers) and your answers while filling them in; the text of feedback you send | To understand your requests, draft agreement documents, read and help you fill in shared documents, and route feedback |
| ElevenLabs | The text of Pactable’s spoken replies, which can include names and amounts. ElevenLabs never receives your voice, your documents, or your contacts. | To generate the spoken voice you hear in the app |
If you choose not to allow AI: none of your data is sent to these providers. Creating agreements and filling shared documents are unavailable until you allow AI; your existing agreements, signing, reminders, and account continue to work, and spoken replies use your device’s built-in voice.
Counterparties on the web: if someone sends you an agreement and you suggest changes on the Pactable website, the text of your suggested changes is processed by Anthropic to interpret them, and your name and contact details appear in the agreement document that Anthropic drafts.
Protection: We share data with these providers only to provide Pactable’s features, under agreements that require them to protect it with the same or equal protection as described in this policy and to use it only to provide their services to us. Anthropic does not use data it receives through its commercial API to train its models. Providers may retain data briefly under their own terms (for example, for security and abuse monitoring) before deleting it.
5. Data Storage and Security
Agreement data is encrypted at rest and in transit using industry-standard encryption (AES-256 at rest, TLS 1.3 in transit). Access to agreement records is restricted to authenticated parties to the agreement. We maintain security practices consistent with industry standards for applications handling personal and legal data.
While we implement reasonable safeguards, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
6. Data Retention
- Active agreements: Agreement data is retained for as long as the agreement is active and for a reasonable period thereafter to allow parties to access their records.
- Executed agreements: Retained indefinitely to ensure both parties can access their legally binding agreements and associated proof files.
- Account data: Retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except for agreement records where you are a party (which must be retained for the other party’s legal interests).
- Conversation transcripts: Retained as part of the agreement audit trail for E-SIGN Act compliance.
- Shared documents: Retained with your account so you can view and re-share your signed copies, until you delete the document or your account.
- Server logs: Retained for up to 90 days for security and debugging purposes.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Portability: Request a machine-readable copy of your data
- Opt-out of messaging: Reply STOP to any SMS/RCS message at any time, or use the unsubscribe link in any product or onboarding email
To exercise any of these rights, contact us at privacy@pactable.io. We will respond within 30 days.
8. California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, request deletion of your personal information, opt out of the sale of personal information (we do not sell personal information), and not be discriminated against for exercising your privacy rights.
To submit a verifiable consumer request, contact us at privacy@pactable.io.
9. Children’s Privacy
Pactable is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Platform and updating the “Effective Date” above. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.
11. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact us at:
Pactable
Email: privacy@pactable.io
Website: pactable.io