Privacy Policy

Last Updated: April 6, 2026

1. Information We Collect

We collect the following information:

Account Information

Name, email address, and authentication data provided through Clerk.

NDA Content

Party names, company names, email addresses, purpose, and terms you enter when creating an NDA.

Signature Data

Typed name, email, IP address, user agent, timestamp, and consent confirmation collected at the time of signing.

Payment Information

Processed by Stripe. We do not store credit card numbers. We retain your Stripe customer ID and subscription status.

2. How We Use Your Information

We use your information to:

Generate and deliver NDA documents

Create a legally compliant audit trail for signed documents

Send transactional emails (signing requests, confirmations, reminders)

Process subscription payments

Authenticate your identity and protect your account

3. Information Sharing

We do not sell your personal information. We share data only with:

NDA counterparties — the other party to your NDA receives the document content and your signature details as part of the agreement

Service providers — Clerk (authentication), Stripe (payments), Resend (email), Neon (database), and Vercel (hosting)

Legal requirements — when required by law, regulation, or legal process

4. Data Retention

Signed NDAs and their audit trails are retained for the duration of the confidentiality period specified in each agreement. Account data is retained while your account is active. You may request deletion of your account and associated data by contacting us.

5. Data Security

We use industry-standard security measures including encrypted connections (TLS), secure database hosting (Neon with SSL), and SHA-256 document hashing for tamper detection. Authentication is handled by Clerk. Payment processing is handled by Stripe (PCI compliant).

6. Your Rights

You have the right to:

Access your personal data

Correct inaccurate data

Request deletion (subject to legal retention requirements for signed documents)

Export your data

Withdraw consent for non-essential processing

7. Cookies

We use essential cookies for authentication (Clerk session cookies) and functionality. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. The “Last Updated” date at the top reflects the most recent revision.

9. Contact

Questions about your privacy? Contact us at support@culturata.net