Privacy Policy

There is also a great deal we never ask for in the first place. The form has no field for your name, the other party’s name, either address, or any dollar amount — not a field we discard, no field at all. Your finished document carries a highlighted blank for each of those, which you fill in yourself after downloading it. We do not have your client’s name, your rate, or the terms of your deal, because we never asked and never received them.

This is a property of how the software is built, not a policy we promise to follow. There is no server-side copy to secure, subpoena, leak, or change our minds about.

The one way we could end up with your agreement is if you send it to us yourself — see section 3. Please don’t: nobody here reviews documents, and we cannot tell you whether yours is right for you.

When you click download, the Word or PDF file is created on your own machine and saved directly to it. There is no upload step, and there is no copy on our servers to delete.

You can confirm this yourself: open your browser’s network inspector, fill in the wizard, and download a document. You will see the ordinary requests that load the site itself — pages, styles, code — and the page-view count described in “Cookies and analytics” below. None of them carry your answers or your document. The document is assembled and saved entirely inside the page.

The trade-off is real and worth stating: because we hold nothing, we can restore nothing. If you close the tab before downloading, your answers are gone for good.

• If you write to us: your message and your email address, so we can reply. Anything you attach is held with the message for the same period — so please do not send us your finished agreement. Nobody here reviews documents, and we cannot tell you whether yours is right for you.
• Server logs. Our hosting provider records ordinary web-server information whenever a page is served — such as IP address, timestamp, the page requested, and browser type. This happens for every visit; it is not something you opt into, and it is how any website on the internet works. These logs are used to keep the site running and secure. We do not use them to build a profile of you, and we do not combine them with anything else.

That is the complete list. Browsing the site, answering the questions, and downloading your document require nothing else from you: no account, no email address, no payment.

We set no cookies at all — not tracking cookies, not advertising cookies, not preference cookies. We store nothing in your browser’s local storage. Because there is nothing to consent to, this site has no cookie banner.

What we do count is page views. Which pages get opened, and how many times. It is measured for us by Vercel, the same company that hosts the site and produces the server logs described above, using the least invasive form of it we could find: no cookie is set, nothing is stored in your browser, and no identifier follows you between visits or to any other website. It answers one question, which we would otherwise have no way to answer at all — is anyone finding this useful.

It counts pages opened. It does not see your answers, your document, or anything you chose in the form, because none of that ever leaves your browser — there is nothing there for it to count. Opening the page for an agreement is visible to us as a number. What you then build on it is not.

Nobody builds a profile of you here. Because the count is cookieless and carries no identifier that survives your visit, nothing links what you did today to what you do tomorrow, and nothing follows you to any other website.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used in state privacy laws. And we have no plans to do so. There is also nothing to sell: we do not hold the contents of your documents.

Do Not Track and Global Privacy Control signals ask a site to stop tracking you or selling your data. We already do neither, for everyone, so there is nothing here for such a signal to switch off and browsing with one turned on changes nothing about how this site treats you.

If this ever changes, this section changes with it, before the change ships — and we will say so on the site rather than quietly editing this page.

We use Vercel to host the site, which is what produces the server logs described above. Email you send us is received and held by our mailbox provider, Google. Each receives only what it needs to do its job, and we do not sell, rent, or trade anything to anyone.

We may disclose information if we are legally required to — a valid subpoena, court order, or law, or to protect someone’s safety or our legal rights. Where we are permitted to tell you, we will.

It is worth repeating what this means in practice: a subpoena for your agreement would produce nothing, because we do not have your agreement — unless you chose to email it to us, in which case we have the copy you sent.

If PactWrite is ever acquired or merged, information we hold may transfer as part of that transaction. We will give notice on the site before that happens, and the acquirer stays bound by this policy until it gives you notice of a different one.

Wherever you are in the United States, you may ask us to:

• Know what personal information we hold about you, where we got it, why we have it, and who we have shared it with;
• Get a copy of it, in a portable format;
• Correct anything inaccurate;
• Delete it, subject to anything we are required by law to keep;
• Opt out of the sale or sharing of your personal information, and of profiling. We do none of these, so there is nothing to opt out of, but the request will be honored as a standing instruction; and
• Not be discriminated against for exercising any of the above. Your price and your access stay the same.

Residents of California, Texas, Colorado, Connecticut, Virginia, and other states with comprehensive privacy statutes have some or all of these rights by law, including under the California Consumer Privacy Act as amended and the Texas Data Privacy and Security Act. We are offering them to everyone regardless of whether a particular statute reaches us.

To make a request, email pw@pactwrite.com. We will confirm receipt within 10 business days and respond within 45 days; if a complex request needs the one further 45-day extension the law allows, we will tell you within the first 45 days. We may need to verify your identity first. We do that by matching the address you write from against an address we already hold for you — the address you previously wrote to us from, or your account email if you have one.

An authorized agent may make a request for you with written proof of authorization. If we decline a request, we will explain why, and you may appeal by replying to our response; we will answer an appeal within 45 days. If we deny the appeal, you may complain to your state attorney general or state privacy regulator.

The service is intended for users in the United States. We do not offer goods or services to individuals in the European Economic Area or the United Kingdom, and this policy does not attempt to describe rights under the GDPR.

• Emails you send us: we keep support correspondence only as long as we need it to help you, and delete old conversations periodically.
• Server logs: held by our hosting provider for a short period and discarded on a rolling basis. We do not export or archive them.

Deletion means deletion from our live systems promptly, and from our providers’ routine backups as those backups age out on their own schedules. We do not keep a shadow copy.

Traffic to and from the site is encrypted in transit. The correspondence we hold sits in our mailbox provider’s systems, encrypted at rest, and access is limited to the people who need it to run the service. There is no database of user documents to protect, because there is no such database.

No system is perfectly secure, and we would rather say so than imply otherwise. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

PactWrite is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, write to us and we will delete it.

In this policy, “PactWrite,” “we,” and “us” mean Finnigin LLC, a Texas limited liability company doing business as PactWrite.

If we make a material change to how we handle information we have already collected from you — what we do with it, who we give it to, or how long we keep it — we will give at least 30 days’ notice on the site before it takes effect.

Adding something new is different. If we introduce a feature you can choose to use — an account, a paid document, anything that asks you for something we do not ask for today — we will tell you what it collects at the point you use it, and update this policy at the same time rather than 30 days beforehand. You will know before you hand anything over, because the telling happens where the asking does.

The line between those two is the one that matters, so we will state it plainly: we will not apply a new practice backwards over information you gave us under an earlier version of this policy. What you gave us is governed by what we said when you gave it.

As with our Terms of Service, the box at the top of this page and each section’s opening paragraph are plain-English summaries; where a summary and the text below it differ, the text below governs. This policy is part of our Terms of Service, which cover what the service does and what it does not.

Questions, requests, and complaints go to pw@pactwrite.com. A real person reads them.