01Overview
CLMS360 ("we," "us," "our") provides a contract lifecycle management platform for businesses. This policy describes how we handle personal data when you visit our website, sign up for an account, or use the CLMS360 product as an Authorized User.
Where a customer organization ("Customer") uses CLMS360 to manage its own contracts, CLMS360 acts as a data processor for that Customer Data, and this policy is supplemented by our Data Processing Addendum. For our own website visitors, marketing contacts, and account administrators, CLMS360 acts as a data controller.
02Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, job title, company, password hash | Provided by you at signup |
| Usage data | Pages viewed, features used, login timestamps, device/browser type | Collected automatically |
| Billing data | Billing contact, invoice history (payment card details held by our payment processor, not us) | Provided by you / payment processor |
| Support data | Messages, attachments, and diagnostics shared when you contact support | Provided by you |
| Cookies | Session identifiers, analytics identifiers, preference settings | Collected automatically |
03How We Use Information
- Provide, operate, and maintain the Service, including authentication and support;
- Send transactional communications, such as security alerts, invoices, and product notices;
- Improve the Service through aggregated usage analysis and testing;
- Detect, investigate, and prevent fraud, abuse, or security incidents;
- Comply with legal obligations, such as tax and accounting requirements;
- With your consent, send product updates and marketing communications, which you may opt out of at any time.
04Legal Basis for Processing
Where applicable data protection law requires a legal basis, we rely on: performance of a contract (to provide the Service you signed up for), legitimate interests (such as securing and improving the Service), consent (for optional marketing communications), and legal obligation (such as tax recordkeeping).
05How We Share Information
We do not sell personal data. We share information only in these circumstances:
- Subprocessors: vetted vendors that help us operate the Service, such as cloud hosting, email delivery, e-signature, and payment processing, bound by confidentiality and data protection terms;
- Legal requirements: when required to comply with a subpoena, court order, or applicable law;
- Business transfers: in connection with a merger, acquisition, or asset sale, subject to this policy continuing to apply;
- With your direction: when you explicitly authorize a third-party integration to access your data.
A current subprocessor list is available on request at privacy@clms360.com.
06Customer Data We Process on Your Behalf
Contracts, clauses, counterparty details, and other content uploaded into a CLMS360 Workspace by a Customer ("Customer Data") is processed strictly under that Customer's instructions. If you are a counterparty or employee whose information appears inside a contract managed in CLMS360, please contact the Customer organization directly — we act only as their processor and will direct such requests accordingly.
07Cookies & Tracking
We use strictly necessary cookies to keep you signed in and secure, and optional analytics cookies to understand product usage. You can manage non-essential cookies through the cookie banner shown on your first visit, or through your browser settings. Disabling strictly necessary cookies may prevent parts of the Service from working.
08Data Retention
We retain account and usage data for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and security obligations. Customer Data is retained per the applicable Order Form and is available for export for 30 days following subscription termination, after which it is deleted or anonymized.
09Security
We use industry-standard safeguards, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, audit logging, and regular security testing. No system is completely secure, and we encourage you to use a strong, unique password and enable available multi-factor authentication.
10International Transfers
CLMS360 may process and store data in countries other than your own. Where we transfer personal data internationally, we rely on recognized safeguards, such as Standard Contractual Clauses, to ensure the data receives an adequate level of protection.
11Your Rights & Choices
Depending on your location, you may have the right to:
To exercise any of these rights, contact us at privacy@clms360.com. We will respond within the timeframe required by applicable law.
12Children's Privacy
The Service is intended for business use by adults and is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
13Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated by email or an in-product notice at least 15 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision.
14Contact Us
Questions about this policy or your personal data can be directed to:
