Last Updated: April 22, 2021
Table of Contents
The information we collect generally falls into the following categories:
We will collect any and all information that you choose to submit to us through, using, or in connection with the Services, including, without limitation, the types of information described below.
Account and Administrative Information. To activate or sign up for an account on the Services you will need to provide your name, email address, and, where applicable, payment information. You may have the option of populating your Service account with or be required to submit other types of information. Any such information that you choose to submit will be collected by Contract Cloud.
Payment Information. Payments for access to and use of the Services made through our website must be made by credit or debit card or, where the options are provided, by ACH or check. All credit and debit card information and other payment information (e.g., bank account numbers) is provided directly to our applicable PCI-compliant third-party payment processor. Contract Cloud does not directly access, handle, or store your credit or debit card information (except that we may store the last four digits of your credit or debit card number to assist our payment processor with recurring payments), but we will maintain a record of the payments you make through our website. To submit payment through our website via credit or debit card, you will need to provide your name and your credit or debit card type, number, expiration date, and security code. You may also be required to provide your billing address. Our payment processors may use Collected Information as described in their respective privacy policies.
User-Generated Content. We will collect all data, information, messages, documents, and other content that are entered into, submitted to, uploaded to, transmitted using, or otherwise provided via the Services by you or on your behalf (e.g., legal documents, templates, and business contact information). You are responsible for any and all such content. You understand and acknowledge that certain features of the Services may allow or require content you provide to be made available to other Service users and that, accordingly, those other users may be able to access and use that content. For example, other Service users at your company or organization may be able to view and download documents that you have uploaded to the Services. You understand that, even after removal, user-generated content you have provided may remain viewable to and may have been copied or stored by other users of the Services. For more information on user-generated content and how it’s used and disclosed, please review our Terms of Service.
Marketing Communications. If you sign up or otherwise opt in to receive updates, promotional communications, surveys, or related materials from us, you will need to provide your email address. We will use this information to provide you with promotional and other electronic communications. You may opt out of receiving promotional emails from us at any time by following the unsubscribe instructions in the applicable email. We may use third-party email providers to deliver these communications to you.
As you navigate and use the Services, certain information can be passively collected—that is, gathered without the user actively providing the information—using various technologies. We passively collect a variety of types of information in a variety of ways, including:
Account Activity. We will collect data about how you use the Services and your account, for example, the Service features you choose to use, how much time you spend using those features, search parameters, and which users you choose to share materials with (if applicable).
IP Addresses and Related Data. The servers used to operate and provide the Services may collect data pertaining to you and the equipment, software, and communication methods you use to access the Internet and the Services, including Internet protocol (“IP”) addresses assigned to the computers and other devices from where you access the Internet, your Internet Services provider (ISP), your device ID number, your media access control (MAC) address, your operating system, your computer screen resolution, your web browser type, the pages you access on the Services, the websites you access before and after visiting the Services, the length of time you spend on the Services, date and time stamps, clickstream data, your approximate geographic location, performance statistics, and usage data. Contract Cloud may use this information to administer the Services and its servers, to generate statistical information, to monitor and analyze Service traffic and usage patterns, to monitor and help prevent fraud, to investigate complaints and violations of our policies, and to improve the Services’ content. We may combine this information with other Collected Information (including personal information) and information obtained from third parties for security reasons and to protect our rights or the rights of others. The suppliers that we use to provide the Services may collect information about your visits to the Services and other websites. Some of this information may be collected using cookies and similar tracking technologies as explained below under “Cookies and Tracking Technologies.”
Location Information. In addition to the approximate geographic location information collected as discussed above, we may, with your consent, access more specific location information to enhance the user experience, increase the usefulness of the Services, and determine what services are available in your area. This includes both geographical location information that you input using the Services (e.g., when you enter a physical address) and, as applicable, geographical location information collected by device-based location services (including GPS data). You may choose to allow us to access your location by granting the Services access to your location when prompted or through your device’s location services settings.
Analytics. The Services may use third-party analytics tools (e.g., Google Analytics) to collect and process data about your use of the Services, including when you visit the Services, URLs of the websites that you visit prior to visiting the Services and when you visit those websites, and IP addresses assigned to the devices from where you access the Internet. Our analytics providers may set and read cookies to collect this data and your web browser will automatically send data collected by those cookies to our analytics providers. Our analytics providers use this data to provide us with reports that we will use to improve the Services’ structure and content.
The Services may use both cookies that we implement and cookies implemented by our suppliers and other third parties. “First-party” cookies allow your browser to talk to the actual website that you are visiting, whereas “third-party” cookies allow your browser to talk to third-party websites, such as the source of an ad that appears on the website you are visiting or a third-party analytics provider.
Most browsers automatically accept cookies. Browsers generally also allow users to manage cookies in the browser’s settings. For example, a browser may allow you to reject cookies from certain websites, reject certain types of cookies regardless of the website, reject or disable all cookies from all websites, and/or delete cookies stored previously. Some browsers also give you the option of being notified every time a cookie is sent to your browser by a website. You can disable or limit cookies but doing so may impact your use and enjoyment of the Services and other websites. For example, the Services may not be able to be personalized for you, may no longer capture or remember your preferences or other choices you have made on the Services in the past, and may not remember your name or contact information.
The types of information collected by a cookie and the purposes for which that information is used depends on the type of cookie. By way of illustration, the types of information collected by the Services’ cookies and the purposes for which that information are used are described below. We may also combine information collected by cookies with other Collected Information.
A cookie can either be a “session” cookie or a “persistent” cookie. Session cookies exist only for so long as you are visiting the applicable website. Session cookies are typically deleted or removed when you exit or quit your browser application. Persistent cookies exist for a set period of time, for example, six months or one year. Each time you visit a website that has implemented a persistent cookie, that cookie will remain active until its predetermined expiration date. You can also manually delete persistent cookies as discussed above.
The Services may also use the following types of tracking technologies: web beacons (also called clear GIFs), flash cookies, and pixels (also called pixel tags). Web beacons are tiny graphics with unique identifiers that functions similar to how cookies function but, in contrast to cookies, web beacons are embedded invisibly on websites. Flash cookies collect and store information about your use of a website and are commonly used for advertisements and videos. Pixel tags can be placed on websites or within emails to track your interactions with those websites and when emails are opened.
How We Respond to Do-Not-Track Signals. Due to the automatic collection of data using cookies as described above, we do not honor “do not track” requests. For this reason, your selection of the “Do Not Track” option provided by your browser may not have any effect on our collection of information using cookies and tracking technologies.
Information from Other Sources. We may obtain data about users of our Services from various third-party companies and public sources and we may combine that data with Collected Information, in each case to the extent permitted by law. This enhances our existing information about our users and customers.
Promotional Communications. Contract Cloud may use Collected Information to send you promotional communications about our products and services to the extent permitted by applicable law. In order to provide you with a personalized experience, these communications may be tailored to your preferences based on, for example, inferences we make using your visits to the Services or the links you click on in Contract Cloud emails. You may opt out of receiving promotional communications from us at any time by following the unsubscribe instructions contained in the email, where applicable, or by contacting us using the contact information provided below under “Contact Us.” Note that, even if you opt out of receiving promotional communications from Contract Cloud, you may still receive administrative communications from us with respect to the Services.
Evaluation and Improvement of Our Services. We may use and disclose Collected Information to analyze, develop, and improve the content, materials, products, and services that we provide; to inform marketing and communication plans and strategies; to understand use demographics and preferences; to analyze the effectiveness of the Services; and to evaluate user needs and customize Service content and users’ experience.
Lawful Processes. We may use Collected Information and share it with third parties as required or permitted in accordance with subpoenas, court orders, law enforcement requests, governmental agency requests, and other legal processes.
Security and Protection of Rights. We may use Collected Information and share it with third parties if doing so is necessary to protect our rights or the rights of others, including to enforce or bring legal action in the event of a violation of our agreements, policies, or legal rights.
How Long We Retain Personal Information
For personal information that we process on behalf of our customers, we will retain that personal information in accordance with the terms of our agreement with them, subject to applicable law.
Choices and Access
We give you choices regarding our use and disclosure of your personal information. To access or update your personal information as it exists in our records, please contact us using the contact information below under “Contact Us.”
Contract Cloud does not guarantee that loss, misuse, or alteration of information collected through the Services will not occur, but we have implemented appropriate technical and organizational security measures in place to help protect against the loss, misuse, and alteration of information under our control. The storage and communication of information can never be completely secure, so we do not guarantee that communications or other information that you submit or that are otherwise provided to us through the Services will be completely secure.
Access by Children
The Services are not directed at children under 13 years of age. Contract Cloud does not knowingly collect or use information from children under 13 through the Services.
Third-Party Websites and Services
Storage of Information in the United States
Your personal information and other Collected Information will be stored and processed in the United States, where our or our suppliers’ servers, databases, or facilities are located or operated. If you access the Services from outside of the United States, you specifically acknowledge and agree that information will be transferred to the United States and that the United States’ data protection and related laws, regulations, and rules may be different, and may require a lower standard of protection, than those of the jurisdiction from where you access the Services.
Contract Cloud is committed to supporting the federal government in implementing enhanced cybersecurity measures to protect against data breaches within the defense industrial base.
Your CMMC Assessment: Contract Cloud does not store or generate either of the following types of data:
@ Contract Cloud, Inc. 2017 - 2021. All Rights Reserved