Privacy Policy

Version of 1 January 2026 · Applies under Federal Law 152-FZ “On Personal Data”

This is a translation for convenience. The legally binding version is the Russian one at контракт.онлайн/privacy; in case of any discrepancy it prevails.

This Policy describes what data the service Контракт.Онлайн collects, how it is used and how it is protected. By using the service you agree to this Policy.

1. What data we collect

Data	When collected	Why
E-mail address	At checkout	Sending the finished file and notifications
Company details (name, address, tax ID, bank details)	When filling in the form	Generating the text of the contract
IP address, browser, device	Automatically on visit	Security and analytics
Payment data (card type, last 4 digits)	At payment	Confirming the transaction. Full card details are never passed to us

We do not collect full bank card numbers, passport data or any other sensitive information not needed to provide the service.

2. How we use the data

• Generating the contract file and delivering it to the e-mail you provide.
• Providing access to download the file via a link.
• Answering support requests.
• Improving the service based on aggregated analytics.
• Complying with the requirements of Russian law.

We do not sell or pass your personal data to third parties for commercial purposes.

3. Data retention

Unpaid drafts (details, e-mail and file) are deleted automatically 7 days after they are created. Paid orders are kept for 3 years from payment — to re-issue the file, answer requests and meet the obligations under the offer within the limitation period (Article 196 of the Civil Code of the Russian Federation) — and are then deleted automatically. Database backups keep the data longer: daily backups for up to 90 days, monthly ones for up to 24 months. You can ask for your data to be deleted earlier (section 6).

The data is stored on servers located in the Russian Federation, as required by Article 18(5) of Federal Law 152-FZ.

4. Disclosure to third parties

Data may be disclosed only in the following cases:

• Payment processor — to carry out the transaction (technical payment data only).
• Mail service — to send the file by e-mail.
• Public authorities — upon a lawful request under applicable law.

5. Cookies and analytics

The site uses technical cookies necessary for it to work. Analytics cookies are used only with your consent (the banner on your first visit). You can disable cookies in your browser settings, but this may break the service.

6. Your rights

Under Federal Law 152-FZ you have the right to:

• obtain information about the processing of your personal data;
• require inaccurate data to be corrected;
• require data to be deleted (the right to be forgotten);
• withdraw consent to data processing.

To exercise these rights contact support. A request is handled within 30 days.

7. Security

Data is transmitted over HTTPS/TLS. Access to the database is restricted and protected. We carry out regular security audits and notify users without delay of incidents where the law requires it.

8. Changes to the policy

We may update this Policy. If the changes are material, a notice will be placed on the site’s home page. Continuing to use the service after the changes are published means you accept the new version.

9. Contact

For questions about the processing of personal data, contact us via the support form.