Privacy Policy

Last updated: January 1, 2025 | Zhost Consulting Private Limited

ContractPilot ("we", "our", "us") is operated by Zhost Consulting Private Limited. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

1. Information We Collect

2. How We Use Your Information

3. Data Security

All data is encrypted at rest using AES-256 and in transit using TLS 1.2+. Document signing tokens are one-time use with 30-day expiry. We implement rate limiting, CSRF protection, and regular security audits.

4. AI & Document Generation

Your document content and organizational parameters are sent to Bithost AI (x.ai) for document generation. We do not use your document content to train AI models. Bithost AI's privacy policy applies to AI processing.

5. Data Retention

Documents are retained for as long as your account is active. You may request deletion of your data at any time by contacting us. Audit trail data for signed documents may be retained for legal compliance purposes.

6. Your Rights (DPDP Act, India)

7. Third-Party Services

We use: Razorpay (payments), Bithost AI (document generation), and your configured SMTP provider (email delivery).

8. Contact

For privacy inquiries: dpo@bithost.in
Zhost Consulting Private Limited, India