Paktas logotipas - tekstas
Paktas logotipas

Privacy Policy

Last Updated: September 30, 2025

This privacy policy (hereinafter – the Policy) sets out how KURIA, MB (hereinafter - Paktas) collects, uses, and protects your personal data when using our automated contract review platform.

1. General Provisions

1.1. Paktas is the data controller, legal entity code 307122159, registered address Gedimino Ave. 9, Vilnius, email info@paktas.co.

1.2. This Policy applies to all individuals who use the Paktas automated contract review and analysis platform.

1.3. This Policy should be read together with our Terms of Use, which supplement this Policy.

1.4. By using our service, you confirm that you have read and agree to this Policy.

2. Basic Information

2.1. Who we are: Paktas is an automated contract analysis service that helps identify potential risks and issues in contracts.

2.2. What we collect: Your account information, uploaded contracts, analysis results, usage data, and payment information.

2.3. Why we process your data: To provide services, improve the platform, manage subscriptions, and fulfill legal obligations.

2.4. Your rights: You have the right to access, rectify, delete your data, and other rights described in section 8.

2.5. Security: We implement appropriate technical and organizational measures to protect your data.

2.6. Contact: For privacy questions, contact us at info@paktas.co.

3. Data Processed

3.1. Account data:

  • Email address
  • Name and surname (if provided)
  • Phone number (if provided)
  • Company name and position (if provided)
  • Account login and authentication data

3.2. Contract and analysis data:

  • Your uploaded contracts and their content
  • Document titles and file names
  • Review results, including:
    • Condition summaries
    • Risk assessments and their significance
    • Recommendations and negotiation strategies
    • Suggestions for changes

3.3. Usage data:

  • Login information and session data
  • Platform usage statistics
  • Used features
  • Analysis history
  • IP address and device information
  • Browser type and settings

3.4. Payment and subscription data:

  • Subscription plan information
  • Payment history
  • Billing addresses
  • Payment method information (we do not store full credit card details)

3.5. Communication data:

  • Correspondence with our team
  • Customer support requests
  • Feedback and survey responses

4. Methods of Data Collection

We collect your data in the following ways:

  • When you create an account, upload documents, make payments, or contact us.
  • When you use our service, we automatically collect usage data (including data via analytics cookies, e.g., Google Analytics, if you consent).
  • We may receive data from third-party service providers, such as payment processing or authentication providers.

5. Purposes and Legal Basis for Data Processing

5.1. Contract execution:

  • Account creation and management
  • Provision of contract analysis services
  • Payment processing and subscription management
  • Customer support

5.2. Legitimate interest:

  • Platform improvement and development
  • Algorithm improvement using anonymized data
  • Ensuring platform security and stability
  • Fraud prevention and blocking unauthorized access
  • Marketing our products and services (where permitted)

5.3. Legal obligation:

  • Compliance with legal requirements
  • Financial record keeping
  • Responding to requests from legal authorities

5.4. Consent:

  • Sending marketing communications (where required by law)
  • Use of additional cookies and similar technologies
  • Processing of special categories of data (if applicable)

You may withdraw your consent at any time, and this will not affect the lawfulness of processing based on consent before its withdrawal.

6. Data Usage

6.1. Service provision and improvement:

  • Account creation and management
  • Contract analysis and result generation
  • Providing risk assessments and recommendations
  • Improving algorithms and service quality
  • Ensuring service security and functionality

6.2. Communication:

  • Responding to inquiries and providing support
  • Sending service-related notifications and updates
  • Sending marketing communications (where permitted)

6.3. Business operations:

  • Payment processing and subscription management
  • Fulfilling legal obligations
  • Enforcing terms of use
  • Analyzing usage patterns and trends

6.4. System improvement:

  • Improving our models for accuracy and functionality
  • Using anonymized data for analysis and statistics

7. Data Retention Period

7.1. Account data: retained as long as you have an active account, and for 12 months after account deletion.

7.2. Contract data: retained as long as needed to provide the service to you. You may delete your analysis data at any time through your account, and we will not retain copies except where required by applicable law (e.g., legal holds, regulatory compliance, or dispute resolution).

7.3. Payment data: retained for 10 years in accordance with accounting requirements.

7.4. Usage data: retained for 24 months.

7.5. Anonymized data may be retained indefinitely for platform improvement purposes.

8. Data Sharing and Recipients

We may share your data with:

8.1. Service providers:

  • Cloud and server service providers (mainly in the EU/EEA)
  • Payment processing service providers
  • Artificial intelligence and machine learning service providers
  • Email communication service providers
  • Authentication service providers
  • Analytics service providers (e.g., Google), if you consent to relevant cookies.
  • Live chat service providers who help us provide real-time customer support.

8.2. Legal requirements:

  • State authorities when required by law
  • In response to legal proceedings
  • To protect our rights, privacy, security, or property

8.3. Business transfer:

  • In connection with a merger, acquisition, or sale of assets (with appropriate safeguards)

We do not sell your personal data to third parties.

9. Live Chat Service (Crisp)

9.1. We use the Crisp chat widget on our website, provided by Crisp IM SARL. This service allows us to communicate with you in real time, answer questions, and provide assistance.

9.2. When you use the chat function, Crisp collects the information you provide (e.g., name, email address, chat content), as well as technical data (e.g., IP address, browser type). If you are logged into your Paktas account, your identification data (name, email) may be automatically transferred to Crisp to improve service quality.

9.3. This data is processed to provide you with customer support and improve our services (legal basis: contract performance and our legitimate interest). More information about how Crisp processes data can be found in their privacy policy.

10. Your Rights

10.1. Under the GDPR and other applicable laws, you have the following rights:

10.2. Right of access:

You may request information about what personal data we process about you and receive a copy of this data.

10.3. Right to rectification:

You may request that we correct or supplement any inaccurate or incomplete personal data.

10.4. Right to erasure:

You may request the deletion of your personal data in certain circumstances, for example, when the data is no longer needed for the purposes for which it was collected.

10.5. Right to restrict processing:

You may request to restrict the processing of your personal data in certain circumstances, for example, when you contest the accuracy of the data.

10.6. Right to data portability:

You may request to receive your personal data in a structured, commonly used, and machine-readable format or request that it be transferred directly to another data controller.

10.7. Right to object:

You may object to the processing of your personal data based on legitimate interests, including profiling. We will stop such processing unless we demonstrate compelling legitimate grounds that override your interests or rights, or for legal requirements.

10.8. Rights related to automated decision-making:

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. However, our contract analysis service uses automated processing for contract analysis and recommendations. These analyses are provided for informational purposes only and are not intended to have legal or similarly significant effects without human review.

10.9. Right to withdraw consent:

If processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

10.10. Right to lodge a complaint:

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the State Data Protection Inspectorate.

To exercise your rights, contact us at info@paktas.co.

11. Data Transfer Outside the EEA

11.1. When using certain service providers (e.g., "Google Analytics", "Crisp"), your data may be transferred outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as European Commission-approved standard contractual clauses, to ensure an adequate level of data protection.

12. Cookies and Tracking Technologies

12.1. Our website uses cookies and similar tracking technologies to improve your browsing experience, analyze traffic, and provide personalized content.

12.2. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

12.3. Necessary Cookies (Always Active):

These cookies are essential for the website to function properly. They enable core functionality such as security, authentication, and session management. These cookies cannot be disabled as they are required for the site to work.

Examples: Authentication cookies, security cookies, session cookies.

12.4. Marketing Cookies (Optional - Requires Consent):

These cookies help us show you relevant ads and measure the effectiveness of our marketing campaigns. They track your browsing activity across websites to build a profile of your interests.

Examples: Google Analytics cookies (e.g., _ga, _gid, _gat), Google Ads cookies, conversion tracking cookies.

Services used: Google Analytics (GA4), Google Ads.

12.5. Cookie Management: You can accept or reject optional cookies through our cookie banner. You can also change your preferences at any time by clicking the 'Cookies' link in the footer. Additionally, you can manage cookies directly through your browser settings, though disabling necessary cookies may affect website functionality.

12.6. Google Analytics: We use Google Analytics to understand how visitors use our website. Google Analytics uses cookies to collect information such as page views, time spent on pages, and navigation paths. This data is processed by Google and may be transferred to Google servers, including those located outside the European Economic Area. We have implemented Google's consent mode to respect your privacy choices. For more information, see Google's Privacy Policy.

12.7. Third-Party Links: Our website may contain links to third-party websites. We are not responsible for the privacy practices or cookie usage of these external sites.

13. Policy Changes

13.1. We may periodically update this Policy. We will notify you of material changes by email or by posting a notice on our website. We recommend reviewing this Policy regularly.

14. Contact

If you have any questions about this Privacy Policy, please contact us by email info@paktas.co.

Paktas | Contract Help