Privacy Policy

Last updated: July 2026

1. Who we are

ATCMS is an AI-powered tender & contract management platform operated by Stipulo AI Ltd, a company registered in England and Wales (Company No. 17272510). Our registered office is 128 City Road, London, EC1V 2NX, United Kingdom. We are registered with the Information Commissioner's Office (ICO) under registration number ZC171429. Our service is accessible at stipuloai.com.

2. What data we collect

Account information: When you register, we collect your name, email address, company name, and a hashed password. We never store your password in plain text.

Contract documents: Documents you upload are stored securely and used solely to provide the contract analysis service. We do not read, share, or sell your contract data.

Usage data: We collect basic usage metrics such as number of documents uploaded and features used. This data is used to improve the service and enforce plan limits.

Audit logs: Every action taken on your account is logged in an append-only audit trail for security and compliance purposes.

3. AI and your data

Your contracts are never used to train AI models.

ATCMS uses Google Gemini via the Vertex AI enterprise API. Under this arrangement, Google does not use your inputs or outputs to train or improve their models. Your contract data stays yours — always.

4. How we store your data

Data isolation: Each company account (tenant) has its own isolated database schema. Your data is physically separated from other companies' data at the database level.

Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3.

Encryption at rest: All data stored in our database is encrypted at rest by our database provider (Neon Postgres on AWS).

Infrastructure: Our application runs on Microsoft Azure in the East US region. We can accommodate EU data residency requirements on request.

5. How we use your data

  • To provide the contract and tender analysis service
  • To send obligation deadline email alerts you have configured
  • To enforce plan limits and manage subscription entitlements
  • To maintain security audit trails
  • To send service-related notifications (never marketing without consent)
  • To process subscription payments via our billing provider (Stripe)

6. Your rights (GDPR)

Under GDPR you have the right to:

  • Access: Request a copy of all data we hold about you
  • Rectification: Correct any inaccurate data we hold
  • Erasure: Request deletion of your account and all associated data
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing of your data

To exercise any of these rights, contact us at hello@stipuloai.com. We will respond within 30 days.

7. Data retention

We retain your data for as long as your account is active. If you delete your account, all your data including documents, clauses, templates, and audit logs are permanently deleted within 30 days. Deletion cascades through all related data automatically.

8. Third-party services

Google Vertex AI: Used for AI contract analysis. Enterprise tier — inputs not used for training.

Microsoft Azure: Cloud infrastructure hosting for application and file storage.

Neon Postgres: Database provider. Data encrypted at rest on AWS infrastructure.

Gmail SMTP: Used to send obligation deadline alerts from hello@stipuloai.com.

Stripe: Payment processing for paid subscriptions. Stripe handles card data directly — we never store payment card details on our own systems.

9. Cookies

ATCMS uses only essential cookies — specifically a JWT authentication token stored in your browser's local storage. We do not use tracking cookies, analytics cookies, or advertising cookies. No cookie consent banner is required as we only use strictly necessary storage.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests: hello@stipuloai.com