Privacy Policy

1. What we collect and why

• Your name, so the agreement says who promised what.
• Your email address, so we can send verification codes, reminders, and the record itself. Email is our working channel today.
• Your phone number, only if you give it. Today it is stored as a contact detail. WhatsApp is the next delivery channel we plan to add, with SMS after that.
• The content you type into an agreement: amounts, schedules, promises, purpose, and any note you write. This is the document. Without it there is nothing to sign.
• Payment confirmations that you and the other party mark yourselves. We record that you said it happened. We never see the money.
• Evidence metadata created at the moment of signing and at each event: timestamps, IP address, browser and device string, the verification code delivery, the consent you checked, and the hash of the document you saw. This is what makes the record hold up.
• Basic technical logs needed to keep the service running and secure.

We do not collect Social Security numbers, bank credentials, or government ID documents. Card details for paid tiers go directly to our payment processor. We never see or store your full card number.

2. Why the evidence trail cannot be edited

The events behind an agreement are append-only. We never update or delete them, and there is no button that would let us.

That is the whole point. A signature that can be quietly removed later proves nothing. If we let one party edit the trail, the other party's evidence would be worthless.

This means some deletion requests cannot be honored in full for a signed agreement while the other party still has a legitimate interest in it. We will always tell you clearly what we can and cannot remove.

3. How long we keep things

• Sealed agreements and their event trail: kept for the life of the agreement plus seven years, so the record survives as long as either party might need it.
• Draft agreements never sent: deleted after ninety days of inactivity.
• Verification codes: minutes. They expire fast and are consumed on use.
• Account contact details: kept while your account is open, then deleted within thirty days of closure, except where they appear inside a sealed agreement.
• Technical logs: up to twelve months.

4. My Pacti is yours, and it is not a score

My Pacti counts what you kept. It is private by default, owned by you, and shown to no one unless you decide otherwise.

It is not a credit score, not a rating, and not a grade. We do not furnish it to consumer reporting agencies, and it is not used for credit, employment, housing, or insurance decisions by us.

If you choose to share it, sharing is per transaction, requires your explicit consent, is logged so you can see it happened, and expires on its own after seventy-two hours.

5. Me pactis are private

On a pacti you make with yourself, the reason you gave for a miss is visible only to you. It is never shown to a witness or to anyone else, and a witness notification never contains it.

Those misses never enter the countable record. Promises about health or recovery never appear in any shared or public surface.

6. Who we share data with

We do not sell your personal information and we do not share it for advertising. We use a small set of service providers to run the product:

• Hosting and content delivery, to serve the app.
• Database and authentication, to store your records and verify sign-in.
• Transactional email, to deliver verification codes and notifications.
• Payment processing, only when you buy a paid tier.
• An AI model provider, used only for drafting assistance.

7. Drafting assistance and AI

When you describe an agreement in your own words in Tell Pacti, the text you provide is sent to our AI model provider so it can propose a draft and return it to you to read.

That content is used for your draft only. It is not used to train models, and it is not retained by us for that purpose.

An AI only proposes. Nothing reaches your form until you press the button that accepts the proposal, and the form stays editable afterwards. An AI never signs: signing is always a human holding down a button on our own ceremony page.

8. The other party sees what you would expect

The person on the other side of your agreement sees the agreement, the schedule, the payment confirmations, and that you signed. That is the shared record.

They never see what you paid us. Price is never shown on a counterparty screen, anywhere.

9. Your rights

Wherever you live, you can ask us to show you the data we hold about you, correct something that is wrong, delete what is not part of a sealed record, export your agreements, or close your account.

Depending on your state, you may also have the right to opt out of sale or sharing. We do not sell or share your data for advertising, so there is nothing to opt out of, but you can still ask.

Write to privacy@pacti.app. We answer within thirty days and we will not charge you for asking or treat you differently because you did.

10. Security

Data is encrypted in transit and at rest. A Pacti is not public: it is not listed anywhere and it cannot be found by searching. The people in it, and a parent or guardian when that applies, open it according to their role. A personal access link opens what that link allows, so keep it to yourself: forwarding it can pass that access on. It is not the same as the temporary invitation to sign, or the QR code you show in person. Receiving or forwarding a link never by itself lets someone sign or act as organizer; that still needs the verification or authorization that applies. To bring someone in, use the sharing action meant for that person.

No system is perfect. If a breach affects you, we will tell you promptly and plainly.

11. Children and minors

Pacti is not directed to children under 13 and we do not knowingly collect personal information from them. If we learn we have, we delete it.

In the Family door, people aged 13 to 17 participate through the guardian custodial pattern, where a parent or guardian is the party of record and consents on the minor's behalf. No other door imposes that pattern. In the Friends door a person aged 13 to 17 participates independently, with no adult involved, and we collect from them only what a Friends pacti needs: a name, and an email address or phone number only if they choose to give one. Surfaces shown to a minor carry no interest or fees and never use the word contract.

12. Where we operate

Pacti operates in the United States during beta and stores data on servers in the United States. The product is available in English and Spanish.

13. Changes to this policy

If we change this policy in a way that matters, we update the date at the top, post the new version here, and email the address on your account at least fourteen days before it takes effect.

14. How to reach us

Privacy questions and rights requests: privacy@pacti.app. Everything else: hello@pacti.app. A person reads both.