Privacy Policy

Agreement Portal | SaaS Product Co UAB | Last updated: 22 June 2026

1. Introduction

SaaS Product Co UAB (“we”, “us”, or “our”) operates the Agreement Portal website and contract intelligence platform.

This Privacy Policy explains how we process personal data when you visit our website, request a demo, communicate with us, or use the Agreement Portal platform.

Agreement Portal is a business-to-business service. The platform allows business customers to upload, store, structure, and analyse contracts and related business documents.

For website visitors, demo requests, sales enquiries, billing contacts, and general business communications, we usually act as a data controller.

For contracts, uploaded documents, extracted contract data, and personal data contained inside customer-uploaded documents, we usually act as a data processor on behalf of the customer. In those cases, our processing is governed by our Data Processing Agreement.

Our website is hosted on the Wix platform. Wix may independently collect data from visitors subject to its own privacy policy. This Privacy Policy covers our own processing activities.

2. Data We Collect

2.1 Demo request and contact form data

When you submit a demo request or contact form on our Website, we collect the information you provide, which may include:

Your name
Business email address
Company name
Any message or additional information you choose to include

We use this information solely to respond to your enquiry and follow up about our Service. We do not share it with third parties for their own marketing purposes.

2.2 Website analytics and advertising data

When you visit our Website, analytics and advertising tools may collect the following data, subject to your consent (see §6):

Browser type, device type, and operating system
IP address (truncated and anonymised by analytics tools before storage)
Website pages visited and time spent on each page
Referral source and approximate geographic location (country and city level)
Interactions with Website elements (clicks, demo request button, form submissions)
Mouse movements, scroll depth, and heatmap data (Microsoft Clarity)
Advertising interaction data used for conversion tracking and remarketing (Meta Pixel, LinkedIn Insight Tag)

2.3 Product account and user data

When a customer creates or uses an Agreement Portal account, we may process:

user name;
work email address;
company name;
role, permission level, and account access rights;
login and authentication activity;
subscription plan and usage information;
support requests and communication history.

We use this data to create and manage user accounts, provide access to the Service, manage permissions, support customers, maintain security, and administer subscriptions.

2.4 Customer contract data

When customers use the Agreement Portal platform, they may upload contracts, agreements, commercial documents, and related business information.

This may include:

uploaded contracts and documents;
contract parties and contact details;
contract dates, renewal dates, and termination dates;
pricing terms and commercial obligations;
service commitments and SLA terms;
liability clauses and liability caps;
termination, renewal, and notice clauses;
extracted contract data and structured metadata;
notes, tags, statuses, and workflow information added by users.

Customers remain responsible for the content they upload and for ensuring they have the right to process any personal data contained in uploaded documents.

2.5 AI-assisted extraction data

Agreement Portal uses automated and AI-assisted tools to extract and structure information from uploaded contracts.

This processing may include sending contract text, contract sections, or extracted fields to third-party AI service providers where required to provide the extraction functionality.

We do not use uploaded contracts, extracted contract data, or AI outputs to train AI models, improve models for other customers, benchmark customer data, or create insights for third parties.

AI-assisted extraction is designed to improve contract visibility and reduce manual work. However, extracted information may contain errors, omissions, or misinterpretations. Customers should review extracted data before relying on it for legal, financial, billing, or operational decisions.

2.6 Integration data

If a customer enables an integration, such as HubSpot, Agreement Portal may exchange relevant data between the platform and the connected third-party system.

This may include company information, customer records, contract metadata, extracted contract fields, renewal dates, pricing terms, and other data selected or configured by the customer.

The customer controls whether an integration is enabled and is responsible for configuring permissions and data sync settings.

2.7 Technical, usage, and support data

We may collect technical and usage data needed to operate, secure, maintain, and improve the Service, including:

IP address;
device and browser information;
log files;
feature usage;
upload and extraction activity;
error logs;
security events;
support and troubleshooting information.

We use this data to maintain platform reliability, investigate issues, prevent misuse, secure the Service, and support customers.

3. How We Use Your Data

We use personal data only where necessary to operate our website, respond to enquiries, provide the Agreement Portal platform, support customers, maintain security, and comply with legal obligations.

We use website, demo request, and contact form data to:

respond to your enquiry, demo request, or access request;
follow up with you about Agreement Portal;
send relevant service, sales, or onboarding communications;
measure website performance and visitor behaviour, where you have given consent;
run advertising, conversion tracking, and remarketing campaigns, where you have given consent;
improve our website content, messaging, and user experience;
comply with legal, tax, accounting, and regulatory obligations.

We use product account and user data to:

create and manage customer accounts;
provide users with access to the Agreement Portal platform;
manage user roles, permissions, authentication, and account security;
administer subscriptions, plan usage, billing, and customer support;
communicate with users about their account, product updates, support requests, and service-related matters.\

We use customer contract data to:

allow customers to upload, store, structure, and manage contracts and related business documents;
extract, organise, and display contract information, including parties, dates, renewals, pricing terms, obligations, liability clauses, termination clauses, SLA commitments, and other commercial information;
provide search, reporting, workflow, visibility, and contract management functionality;
help customers identify missing, inconsistent, or commercially relevant contract data;
allow customers to review, correct, approve, export, or use extracted contract data.

We use AI-assisted and automated processing to:

extract and structure information from uploaded contracts;
identify key contractual terms and commercial data points;
reduce manual review work and improve visibility across customer contracts.

AI-assisted extraction may involve the use of third-party AI service providers where required to provide the extraction functionality. Extracted information may contain errors, omissions, or misinterpretations, so customers should review extracted data before relying on it for legal, financial, billing, or operational decisions.

Where a customer enables an integration, such as HubSpot, we use integration data to:

connect Agreement Portal with the customer’s selected third-party system;
sync relevant contract, company, customer, deal, or renewal data;
support customer-configured workflows between Agreement Portal and the connected platform.

We use technical, usage, and support data to:

monitor, secure, maintain, and back up the Service;
investigate errors, bugs, security events, or misuse;
provide customer support and technical troubleshooting;
maintain platform reliability and performance;
understand how the Service is used and improve product functionality.

We do not sell customer data. We do not use uploaded contracts, extracted contract data, or AI outputs for advertising purposes. We do not use customer contracts or extracted contract data to train AI models, improve models for other customers, benchmark customer data, or create insights for third parties.

4. Legal Basis for Processing

4.1 Demo request and contact form data

We process this data on the basis of our legitimate interests in responding to business enquiries and following up with prospective customers. You may ask us to stop contacting you at any time by emailing privacy@agreementportal.com.

4.2 Website analytics and advertising data

We process analytics and advertising data on the basis of your freely given, specific, and informed consent, obtained via our cookie consent banner before any non-essential cookies or scripts are activated.

You may withdraw your consent at any time through our cookie settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Essential cookies required for the Website’s core functionality do not require consent and are placed automatically.

5. Data Sharing

We do not sell your personal data. Subject to your consent given via our cookie banner, our Website uses the following analytics and advertising tools:

Google Analytics 4 (GA4) — website usage analytics (Google LLC, United States). GA4 truncates IP addresses before storage and does not store full IPs. Data is processed under Google’s Data Processing Terms and the EU–US Data Privacy Framework.
Google Tag Manager — tag management system used to deploy and manage tracking scripts on our Website (Google LLC, United States). Google Tag Manager itself does not collect personal data; it facilitates loading of the other tools listed here.
Meta Pixel — advertising measurement and conversion tracking (Meta Platforms, Inc., United States). We and Meta act as joint controllers under Article 26 GDPR for the personal data collected via the Meta Pixel. The arrangement between us is governed by Meta's Controller Addendum. You may exercise your data protection rights against either us or Meta; for details of Meta's processing, see Meta's Privacy Policy at facebook.com/privacy/policy.
LinkedIn Insight Tag — conversion tracking, retargeting, and campaign analytics for LinkedIn advertising (LinkedIn Ireland Unlimited Company, Ireland / LinkedIn Corporation, United States). LinkedIn may match Website visitors to LinkedIn member profiles for advertising purposes. For details, see LinkedIn’s Privacy Policy at linkedin.com/legal/privacy-policy.
Microsoft Clarity — behavioral analytics tool that records session replays, heatmaps, and user interaction data to help us understand how visitors use the Website (Microsoft Corporation, United States). Clarity may record mouse movements, clicks, and scroll behaviour. No personally identifiable information is intentionally captured; however, you should avoid entering sensitive data into any Website field if you do not wish it to be captured. For details, see Microsoft’s Privacy Statement at privacy.microsoft.com.
Wix Analytics — website visitor analytics (Wix.com Ltd., Israel — EU adequacy decision applies)\

Google Analytics 4 truncates IP addresses before storage and does not store full IPs. Meta Pixel may receive your IP address as part of browser-level data, governed by Meta’s Data Policy.

We may also share your contact details with our internal sales team to follow up on your demo request. We do not share your data with any other third parties.

6. International Data Transfers

Google, Meta, LinkedIn, and Microsoft process data in the United States. Where we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and, where applicable, EU–US Data Privacy Framework certification verified annually per vendor.

Wix processes data in Israel, which benefits from an EU adequacy decision.

7. Data Retention

We retain your personal data only as long as necessary:

Demo request and contact form data: retained for up to 2 years from last contact, then deleted
Google Analytics 4 data: retained for up to 14 months (default GA4 setting), configurable in our GA4 property settings
Google Tag Manager: does not independently retain data; retention governed by the tools it deploys
Meta Pixel data: governed by Meta’s data policies
LinkedIn Insight Tag data: retained for up to 90 days for direct conversions; up to 180 days for indirect conversions, per LinkedIn’s standard policy
Microsoft Clarity data: session recordings retained for up to 30 days; aggregated heatmap data may be retained longer per Microsoft’s policies
Wix Analytics data: governed by Wix’s data retention policies

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our Website uses HTTPS/TLS encryption for all data transmitted between your browser and our servers.

In the event of a personal data breach likely to result in a risk to you, we will notify the State Data Protection Inspectorate of Lithuania (VDAI) within 72 hours and notify you without undue delay where required by law.

9. Your Rights

Under GDPR you have the following rights in relation to your personal data:

Right of access (Article 15) – to obtain a copy of the personal data we hold about you
Right to rectification (Article 16) – to correct inaccurate or incomplete data
Right to erasure (Article 17) – to request deletion of your data in certain circumstances
Right to restriction (Article 18) – to limit how we process your data
Right to data portability (Article 20) – to receive your data in a structured, machine-readable format
Right to object (Article 21) – to object to processing based on legitimate interests
Right to withdraw consent – where processing is based on consent (e.g. analytics cookies), you may withdraw at any time without affecting the lawfulness of prior processing

To exercise any of these rights: contact us at privacy@agreementportal.com. We will respond within one month. Where necessary, this may be extended by a further two months; we will notify you of any extension and the reasons within the first month.

If you believe your rights have not been respected, you may lodge a complaint with:

The State Data Protection Inspectorate of Lithuania (VDAI) — vdai.lrv.lt
The data protection authority in your EU member state of habitual residence or place of work

10. Cookies

We use cookies and similar technologies on our Website.

Cookies are small text files stored on your device when you visit a website. Similar technologies, such as pixels, tags, and scripts, may also be used to understand website usage, measure advertising performance, and improve the visitor experience.

We use the following categories of cookies and similar technologies:

Essential cookies — required for the Website’s core functionality, such as security, page loading, form functionality, and remembering your cookie preferences. These are placed automatically and do not require consent.
Analytics cookies — used to understand how visitors use the Website, which pages are visited, how visitors interact with content, and how the Website can be improved. These are placed only with your consent.
Advertising and remarketing cookies — used to measure advertising performance, track conversions, build remarketing audiences, and show more relevant ads. These are placed only with your consent.
Session recording and behaviour analytics tools — used to understand how visitors interact with the Website, such as clicks, scrolling, page navigation, and form interaction. These are placed only with your consent.

Depending on your consent choices, we may use tools such as Google Analytics 4, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, Microsoft Clarity, and Wix Analytics.

Our cookie consent banner appears when you first visit the Website. Non-essential cookies, pixels, tags, and scripts are activated only after you have given consent for the relevant category. You can accept, reject, or manage cookie categories through the cookie banner or cookie settings.

You may withdraw or change your consent at any time through the cookie settings. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Where a change affects processing based on consent, we will seek fresh consent before the new processing begins.

12. Contact

SaaS Product Co UAB

Email: privacy@agreementportal.com

Address: V. Žalakevičiaus str. 29-12, Vilnius, Lithuania