Privacy Policy

Last updated: [DATE] · Effective from: [DATE]

[Legal Entity Name Pty Ltd] (ABN [XX XXX XXX XXX]), trading as AgreeMake (“AgreeMake”, “we”, “us”, “our”), is committed to protecting the privacy of personal information we hold. This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you can access or correct it, or make a complaint, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using AgreeMake, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the platform.

1. What personal information we collect

The personal information we collect depends on how you use AgreeMake. It may include:

  • Account information — your name, email address, and password (stored as a secure hash, never in plain text).
  • Agreement content — the documents, clauses, fields and terms you create, upload, edit or sign, and any related counterparty details (e.g. the other party’s name and email, where you invite them to review or sign).
  • Payment information — if you purchase AI credits or receive payouts as a listed professional, our payment processor (Stripe) collects and holds your card or bank details directly; we do not store full card numbers ourselves.
  • Usage information — how you interact with the platform (e.g. pages viewed, features used, actions completed), collected to operate and improve the service.
  • Communications — messages you send us (e.g. support requests), and records of notifications and reminders we send you.

We do not currently use third-party analytics or advertising tracking tools on this platform. If this changes, we will update this policy and, where required, seek your consent.

2. How we collect personal information

We collect personal information directly from you when you create an account, build or upload an agreement, invite a counterparty, make a payment, or contact us. We may also collect personal information about you from a counterparty who names you in an agreement they create (for example, if someone invites you to sign a document).

3. Why we collect, hold, use and disclose personal information

We collect and use personal information to:

  • create and administer your account, and provide the core service (creating, reviewing, signing and storing agreements);
  • process payments for AI credits and professional payouts;
  • send you agreement-related notifications (e.g. a counterparty has signed, a milestone is due, a review has been requested);
  • provide AI-assisted drafting and review features, where you choose to use them;
  • respond to support requests and other communications from you;
  • maintain the security, integrity and reliability of the platform; and
  • comply with our legal obligations.

We do not sell personal information to third parties.

4. Disclosure of personal information, including overseas

We disclose personal information only where necessary to provide the service, and only to the following categories of recipients:

  • E-signature providers — Dropbox Sign and/or DocuSeal, to facilitate legally binding electronic signature of your agreements.
  • AI service provider — Anthropic, whose Claude models power our AI-assisted drafting and review features. Content you submit to these features is processed by Anthropic solely to generate the output you requested.
  • Payment processor — Stripe, to process AI credit purchases and professional payouts.
  • Qualified legal professionals — where you request an optional legal review of an agreement, the relevant content is shared with the reviewing professional for that purpose only.
  • Service providers who support our infrastructure and operations (e.g. email delivery), bound by confidentiality obligations.
  • Regulators or authorities where required or authorised by law.

Some of these recipients (including Stripe and Anthropic) are located overseas, principally in the United States. Where we disclose personal information to an overseas recipient, we take reasonable steps to ensure that recipient handles your information consistently with the Australian Privacy Principles, including by relying on the recipient’s own published privacy and security commitments.

5. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including encryption of data at rest and in transit, and role-based access controls limiting who within our organisation can access your information. AgreeMake is Australian owned and hosted, and is ISO 27001 aligned.

No method of transmission or storage is completely secure. If we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

6. How long we keep your information

Your signed agreements and related records are retained in your Library for as long as you maintain your account, since the ability to find, reopen and reuse past agreements is a core part of the service. If you close your account, we will delete or de-identify your personal information within a reasonable period, except where we are required to retain it for legal, accounting or dispute-resolution purposes (for example, records of an executed agreement that may still be legally relevant).

7. Access, correction and complaints

You may request access to, or correction of, the personal information we hold about you at any time by contacting us using the details below. We will respond within a reasonable period, and will not charge you for making a request.

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us using the contact details below. We will investigate and respond within a reasonable timeframe. If you are not satisfied with our response, you may lodge a complaint with the OAIC at oaic.gov.au.

8. Cookies

We use strictly necessary cookies to keep you signed in and to remember your session while using the platform. We do not currently use cookies for advertising or third-party tracking purposes.

9. Children’s privacy

AgreeMake is not directed at, and is not intended for use by, children under the age of 18. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or legal obligations. We will post the updated policy on this page with a new “Last updated” date, and where changes are material, we will take reasonable steps to notify you directly.

11. Contact us

For privacy questions, access or correction requests, or complaints, contact us at:

[Legal Entity Name Pty Ltd]
Email: privacy@agreemake.com
[Registered business address]