Back to Main Page

eNDA Technologies Privacy Policy

Last Updated: October, 2026

This Privacy Policy explains how eNDA Technologies, LLC (“eNDA,” “we,” “our,” “us”) collects, uses, discloses, and protects personal information when individuals and organizations access or use eNDA’s mobile / desktop websites, applications, platforms, artificial intelligence tools (including copilot and agent features), electronic signature tools, document-generation tools, filing and legal services, and related products and services (collectively, the “Services”).

This Privacy Policy describes our practices and should be read together with our Terms of Service, which govern your use of the Services. Capitalized terms used but not defined in this Privacy Policy have the meanings given in the Terms of Service.

eNDA may act as either a data controller or a data processor depending on the context of processing, as explained below.

1. Scope and Application

This Privacy Policy applies to personal information we process in connection with:

This policy does not apply to the privacy practices of third-party services you integrate with eNDA, or of Independent Attorneys, who maintain their own privacy and confidentiality obligations. Where eNDA processes User Content (defined below) as a processor on behalf of a customer, the customer’s privacy practices govern that processing, except for the uses described in Section 2 for which eNDA acts as a controller.

2. Controller and Processor Roles

eNDA as Processor

For any information that customers or their users upload, create, edit, store, or manage using the Services, including Inputs and Outputs as defined in our Terms of Service (“User Content”), eNDA generally processes that information on behalf of the customer to provide the Services, as described in this Privacy Policy and our Terms of Service. This includes:

For User Content, the customer (or the customer’s administrator) is the data controller and is responsible for handling privacy rights requests related to such data.

eNDA as Controller

eNDA acts as the data controller for information we collect for our own business and operational purposes, and for the limited uses of User Content that we make for our own purposes as permitted by our Terms of Service. This includes:

Counterparties, Guests, and Other Individuals

Documents processed through the Services often contain personal information about individuals who are not eNDA customers, such as counterparties, signatories, employees, and their advisers. This information is processed as part of the relevant customer’s User Content, and the customer is responsible for having the right to share it with eNDA. Guests invited to view, comment on, or negotiate documents may also provide their own information to eNDA, which we process as described in this Privacy Policy. Individuals whose information appears in a customer’s documents should direct privacy requests to that customer, and we will assist the customer as required by law.

3. Information We Collect

eNDA collects the following categories of personal information. The specific information collected depends on your interactions with the Services.

A. Identifiers and Contact Information

B. Account, Billing, and Payment Information

C. User Content (Processor Role)

D. Usage, Event, and Technical Data

E. Optional Identity Verification or Biometric Information

If you or your organization use identity verification via Stripe Identity or another provider, eNDA may receive confirmation of verification results. Information processed by the vendor may include:

eNDA does not store raw biometric data. Such data is collected and stored by the identity-verification provider under its own privacy terms. Where required by law, we or our provider will obtain your written consent before biometric information is collected, and will inform you of the purpose of the collection and how long it will be retained.

F. Marketing, Lead Generation, and Engagement Data

G. Cookies, Tracking Technologies, and Behavioral Advertising

We use cookies, web beacons, pixels, tags, and similar technologies to support:

Cookie preferences may be managed through eNDA’s cookie settings, where available, and through your browser settings. Where required by law, we treat Global Privacy Control (GPC) browser signals as a valid request to opt out of the sale or sharing of personal information.

4. How We Use Personal Information

eNDA uses personal information for the following business purposes.

A. Providing the Services

B. Improving the Services

C. AI and Machine Learning

eNDA may use User Content, usage data, and event data, including in de-identified or aggregated form, to:

We do not use User Content to train generative AI foundation models offered to third parties, and our agreements with AI Providers prohibit them from using User Content provided through the Services to train their own models.

D. Analytics and Research

E. Marketing and Cross-Selling

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by emailing support@endatech.app. We do not use the contents of your documents or other User Content for advertising or marketing purposes, and we do not share User Content with marketing or advertising partners.

F. Security and Compliance

5. How We Share Personal Information

eNDA may share personal information with third parties in the following circumstances.

A. Service Providers and Sub-Processors

We engage vendors who assist with:

These parties may only use information under eNDA’s instructions and for the contracted purpose. A list of our current sub-processors is available on request by emailing support@endatech.app.

B. Integrations and API Partners

If you authorize an integration with a third-party system, or initiate or approve an Agent Action, eNDA may transmit the necessary data to that third party according to your instructions and configuration, including sending documents, redlines, and messages to counterparties and other recipients you designate. Once received, that data is subject to the recipient’s own privacy practices.

C. Business Partners

We may share limited personal information, such as contact and account information, with select partners for co-marketing, cross-selling, and referring relevant offerings, consistent with applicable privacy laws and your opt-out rights. We do not share User Content with these partners. If you engage an independent attorney through the Services, we share the information needed for that attorney to evaluate and perform the engagement.

D. Legal and Safety Requirements

We may disclose information:

E. Business Transfers

If eNDA enters into a merger, acquisition, financing, or similar transaction, personal information may be transferred as part of that transaction.

F. “Selling” or “Sharing” Under Applicable Law

eNDA does not sell personal information for monetary consideration. Certain data-sharing practices for advertising or analytics may be classified as “selling” or “sharing” under some state laws. Individuals may opt out of such practices by emailing support@endatech.app with the subject line “Do Not Sell or Share” or by enabling Global Privacy Control in their browser. De-identified and aggregated data, including Market Insights, is not personal information.

6. Cross-Border Data Transfers

eNDA may process and store information in the United States or other jurisdictions. When transferring personal information internationally, eNDA uses appropriate legal mechanisms such as:

We maintain administrative, physical, and technical controls to protect personal information regardless of location.

7. AI and Machine Learning Practices

This section applies to all eNDA AI features, including document drafting, clause recommendations, analysis tools, risk scoring, and copilot and agent features.

AI Providers

Our AI features are powered in part by third-party AI Providers, including Anthropic and OpenAI. We send these providers the User Content and prompts needed to generate a response. Our agreements with AI Providers prohibit them from using User Content provided through the Services to train their models and limit their retention of that content to what is needed to provide and secure their services. AI-generated outputs may be inaccurate and should be reviewed before use.

Model Improvement

eNDA may use User Content, and de-identified or aggregated data derived from it, to evaluate, fine-tune, and improve eNDA’s own AI features and models that power the Services. De-identified data is processed in a way that cannot reasonably be linked back to an identifiable individual or organization, and we commit not to attempt to re-identify it, except to test the effectiveness of our de-identification safeguards.

Foundation Model Training

eNDA does not use User Content to train general-purpose or foundation AI models offered to third parties unless expressly agreed to in writing.

Market Insights

eNDA offers Market Insights, which provide users with de-identified benchmarks and trends about agreement terms, such as how often particular clauses or positions appear in agreements of a given type. Market Insights are generated from de-identified data derived from User Content across our customers, together with other sources available to eNDA. As described in our Terms of Service, all User Content is eligible for inclusion in Market Insights, and by using the Services you authorize eNDA to extract terms, provisions, data fields, and other information from your User Content, de-identify it, and combine it with information from other customers and sources. Before information is included, we remove or generalize names, signatories, addresses, and other identifiers and apply aggregation thresholds and other safeguards designed to prevent any customer, counterparty, or agreement from being identified. eNDA owns, and may retain indefinitely, de-identified and aggregated data, including Market Insights, including after you cancel your subscription, delete your User Content, or close your account.

8. Your Privacy Rights

Depending on your location, applicable law may grant you rights such as:

Requests relating to User Content must be directed to the customer that controls that data.

Some information we may process is considered “sensitive” under certain state laws, such as images of government-issued identification processed for identity verification and account login credentials. We use sensitive personal information only as necessary to provide the Services, verify identity, and maintain security, and not to infer characteristics about you.

9. How to Exercise Your Rights

Individuals may submit requests through:

We may require identity verification before fulfilling certain requests. Where permitted by law, you may use an authorized agent to submit a request on your behalf, and we may require proof of the agent’s authority. We will not discriminate against you for exercising your privacy rights. If we deny a request, you may appeal by replying to our response or by emailing support@endatech.app with the subject line “Privacy Request Appeal.”

10. Data Retention

eNDA retains personal information:

11. Security

eNDA employs administrative, technical, and physical safeguards, including:

No system is completely secure, and we cannot guarantee absolute protection.

12. Children’s Information

eNDA’s Services are intended for adults. We do not knowingly collect personal information from anyone under the age of 18. If we learn such information has been collected, we will delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by email before they take effect. If we make a material change to how we use personal information we have already collected, we will obtain your consent where required by law.

14. Contact Us

For questions, requests, or concerns about this Privacy Policy:

eNDA Technologies, LLC
228 Park Ave S, PMB 995086
New York, New York 10003, USA
Email: support@endatech.app