Privacy Policy - ContractSQ

1. Introduction

ContractSQ ("we", "us", "our") is a custom software development and AI automation agency. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, or engage our services.

ContractSQ is operated by UAB Contract Square, registered in Lithuania. For the purposes of the General Data Protection Regulation (GDPR), we are the data controller.

2. Data We Collect

Contact Information

When you submit our contact form or email us, we collect your name, email address, and any details you provide about your project. We use this solely to respond to your inquiry and discuss potential collaboration.

Analytics Data

With your consent, we use Firebase Analytics to collect anonymized usage data such as pages visited, time on site, and general device information. This helps us understand how visitors use our website and improve it. No analytics data is collected until you accept cookies via our consent banner.

Error Monitoring

We use Sentry for error monitoring to ensure our website functions correctly. This may collect technical data such as browser type, OS version, and error stack traces. This processing is based on our legitimate interest in maintaining a reliable website.

Client Project Data

If you engage us for a project, we may collect business contact details, project requirements, and other information necessary to deliver our services. This is governed by individual service agreements.

3. How We Use Your Data

To respond to your inquiries and communicate about potential projects
To deliver software development and consulting services
To improve our website based on anonymized analytics (with your consent)
To monitor and fix website errors (legitimate interest)
To comply with legal obligations (e.g., accounting, tax)

4. Legal Bases for Processing

Consent: Analytics cookies are only activated after you accept them via our cookie banner.
Contractual necessity: Processing data needed to deliver services you have engaged us for.
Legitimate interests: Error monitoring, website security, and responding to business inquiries.
Legal obligations: Retaining financial records as required by applicable law.

5. Cookies

Our website uses cookies. We categorize them as follows:

Strictly Necessary

Your cookie consent preference is stored in your browser's local storage. This does not track you and is required for the consent mechanism to work.

Analytics (requires consent)

Firebase Analytics cookies are only set after you click "Accept" on our cookie banner. You can change your preference at any time by clicking "Cookie Settings" in the website footer.

6. Data Sharing

We do not sell, trade, or rent your personal data. We may share data with:

Service providers: Google (Firebase Analytics), Sentry (error monitoring) — only with appropriate data processing agreements in place.
Legal requirements: If required by law, court order, or regulatory authority.

We do not transfer personal data outside the European Economic Area. Our servers and operations are based in the EU.

7. Data Retention

Contact form submissions: Retained for up to 12 months after our last communication, then deleted.
Client project data: Retained for the duration of the project plus any period required by applicable law (e.g., accounting records).
Analytics data: Automatically anonymized and aggregated by Firebase. Individual session data is retained for up to 14 months.
Error logs: Retained for up to 90 days in Sentry.

8. Your Rights Under GDPR

If you are in the European Economic Area, you have the following rights:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
Restriction: Request that we limit how we use your data.
Portability: Request your data in a structured, commonly used, machine-readable format.
Objection: Object to processing based on legitimate interests.
Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at team@contractsq.com. We will respond within 30 days as required by GDPR.

You also have the right to lodge a complaint with your local data protection authority. In Lithuania, this is the State Data Protection Inspectorate (VDAI).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted communications (TLS/SSL), access controls, and secure hosting infrastructure within the EU. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data:

Company: UAB Contract Square

Email: team@contractsq.com

Website: contractsq.com