Privacy

Privacy Policy

Effective date: June 9, 2026. This Privacy Policy explains how getContracted collects, uses, shares, and protects personal information.

Related documents: Cookie Policy, Terms of Service, Data Processing Addendum, and Company Information.

1. Controller and contact

getContracted is operated by OnlineTools Kft., Szent Donát út 20., 8258 Badacsonytomaj, Hungary, VAT ID HU27438044.

For the website, account administration, billing, support, security, and product operations, OnlineTools Kft. is the controller of personal information. Privacy questions and requests can be sent to info@getcontracted.online.

For customer, property, quote, service agreement, and communication records entered by a business customer, that business customer usually decides why the data is processed. In that context, OnlineTools Kft. generally processes the data to provide the service, subject to the Data Processing Addendum where applicable.

2. Information we process

Account and company information: names, email addresses, business names, roles, authentication data, preferences, billing details, and support communication.

Customer workflow data: customer contact details, property information, service agreement data, quote data, notes, files, generated PDFs, signature workflow records, email records, CRM follow-up context, and related operational records entered by a business customer.

Technical and usage data: device and browser information, log data, security events, diagnostics, page usage, cookie consent choices, analytics data where enabled, IP address, and approximate location derived from technical data.

Billing and integration data: subscription status, Stripe customer and subscription references, invoice references, email-sender configuration, integration status, and related administrative metadata.

3. Sources of information

We collect information directly from users, from business customers that invite users or enter customer records, from product integrations, from payment and email providers, and from technical operation of the website and application.

When website analysis or onboarding assistance is used, the service may process public business website content or contact-page information supplied by the customer or retrieved from public pages.

4. How we use information

We use information to provide the service, authenticate users, run customer and property workflows, create service agreements and quotes, generate PDFs, send emails, support digital signatures, operate dashboards, provide feedback and support, bill subscriptions, troubleshoot issues, prevent abuse, and improve reliability.

We may send account, security, billing, product, and support messages. Marketing or CRM messages are sent only where configured and legally permitted, with appropriate suppression or opt-out handling.

Where EU data protection law applies, the legal bases may include contract performance, legitimate interests in operating and securing the service, consent where required, and compliance with legal obligations.

5. Service providers and subprocessors

We use service providers for hosting, authentication, storage, database services, search, analytics, email delivery, payment processing, monitoring, AI-assisted features where enabled, support, and deployment.

Current project infrastructure may include Firebase/Google Cloud, Vercel, Algolia, Stripe, MailerSend, OpenAI, Anthropic, and related operational providers.

We do not sell customer workflow records. We share information with providers only as needed to operate, secure, support, bill, and improve the service, or as required by law.

6. Cookies and analytics

We use essential cookies for site and app operation, authentication, security, session handling, and consent storage.

Optional analytics, performance, functional, and marketing cookies may be used according to consent settings where the banner is shown. More detail is available in the Cookie Policy.

7. Payments

Paid subscriptions are processed through Stripe. We receive and store Stripe references, subscription status, invoice references, billing contact data, and related payment metadata.

Full card numbers are handled by Stripe and are not stored in the getContracted application.

8. International processing

OnlineTools Kft. is based in Hungary, while the US-facing getContracted service may use global cloud and infrastructure providers. Personal information may be processed in the United States, the European Economic Area, and other locations where providers operate.

Where required, international transfers are handled through provider data-processing terms, standard contractual clauses, or other legally available transfer mechanisms.

9. Retention

We keep information for as long as needed to provide the service, maintain accounts, meet legal and tax obligations, resolve disputes, enforce agreements, preserve security records, and operate backups.

Business customers can request export or deletion of company data through supported account workflows or by contacting support. Some billing records, security logs, deletion audit records, and backup copies may be retained where legally or operationally required.

10. Privacy rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how personal information is used and shared.

If you are an end customer of a service contractor using getContracted, please contact that contractor first. We may need to route the request to the business customer that controls the record.

Submit requests to info@getcontracted.online. We may need information to verify the request and protect account data from unauthorized access.

11. US state privacy notice

Some US state privacy laws, including California privacy law where applicable, provide rights to know, access, delete, correct, opt out of certain sale or sharing, limit certain sensitive information uses, and avoid discrimination for exercising rights.

The current product is intended not to sell personal information. If advertising or marketing cookies are enabled in a way that requires an opt-out under applicable state law, we will provide the required controls.

We collect the categories described in this policy for the business and commercial purposes described above and disclose them to service providers as needed to operate the service.

12. Security

We use administrative, technical, and organizational measures intended to protect information and maintain tenant separation, including authenticated access, managed cloud infrastructure, encrypted transport, role-aware access surfaces, logging, and backup processes.

No website, application, or cloud service can guarantee absolute security. Users are responsible for protecting their credentials and assigning account permissions carefully.

13. Children

getContracted is business software and is not directed to children. We do not knowingly collect personal information from children through the public website or application account flows.

14. Changes

We may update this Privacy Policy as the product, providers, laws, or business operations change. The effective date at the top of this page shows when the policy was last updated.