Skip to content

Legal

Privacy Policy

Last updated: 26 August 2026

1. Introduction and data controller

Myhanko AI (“we”, “us”, or “our”) is the brand name for the vendor and contract management platform operated by UniiD Technologies. This Privacy Policy describes how we collect, use, store, and share personal information when you visit our marketing website, use our platform, or communicate with our sales and support teams.

Data controller: UniiD Technologies. For privacy inquiries, contact us at [email protected].

2. Information we collect

We collect information in three broad categories:

2.1 Information you provide directly

  • Account registration details (name, work email, company, role);
  • Contract, vendor, and exhibit data uploaded to the platform;
  • Communications with our support and sales teams, including meeting bookings through Calendly.

2.2 Information collected automatically

  • Full IP address, browser type and version, device type, operating system;
  • Pages viewed, scroll depth, clicks, taps, and navigation paths;
  • Session recordings, heatmaps, and mouse/scroll movements via Microsoft Clarity;
  • Referrer URL, approximate location derived from IP, and timestamps.

2.3 Information from third parties

  • Booking and scheduling information from Calendly;
  • Analytics and session data from Google and Microsoft, processed under their respective policies.

3. How we use information and legal bases

We process personal information only where we have a valid legal basis:

Purpose Legal basis (GDPR) Categories involved
Provide and operate the Myhanko platform Performance of a contract Account, contract, and vendor data
Communicate about accounts, support, and product updates Legitimate interest / Consent (for marketing) Contact details and communication history
Ensure security, prevent fraud, and enforce terms Legitimate interest / Legal obligation IP address, device info, usage logs, audit trail
Understand website usage and improve the site Consent (for analytics cookies and session recordings) Usage data, full IP address, session recordings
Comply with tax, legal, and regulatory obligations Legal obligation Account, billing, and contact data

4. No masking or redaction of analytics data

We do not anonymize IP addresses, mask screen recordings, or redact on-page behavior in our marketing analytics. This means:

  • Google Analytics receives and stores your full IP address and detailed usage data;
  • Microsoft Clarity records full session replays of your visit, including mouse movement, scrolling, clicks, and the content visible on screen;
  • If you interact with any form, input, or clickable element on the marketing site, that interaction may be visible in session recordings;
  • We do not use Clarity’s masking features to hide text, images, or form fields by default.

If you prefer not to be recorded, use the “Opt out” button in the site banner or the opt-out controls on the Cookie Policy page. You can also disable cookies and local storage in your browser settings.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. Analytics and session-recording tools load on page load by default. For a complete list of cookies, their purposes, durations, and providers, see our Cookie Policy.

Third-party analytics providers process data under their own policies:

6. How we share information

We do not sell personal information. We share it only with:

  • Service providers who help us host, operate, secure, and analyze the platform (e.g., hosting provider, email/OTP provider, analytics providers, scheduling tools);
  • Legal and regulatory bodies when required by law, court order, or to protect our rights;
  • Business successors in the event of a merger, acquisition, or asset sale, subject to confidentiality obligations.

7. International transfers

Our marketing website and platform are hosted on infrastructure that may process data in multiple jurisdictions, including the United States. Google and Microsoft may process analytics data in the US and other countries. We rely on the Standard Contractual Clauses approved by the European Commission, together with any required supplementary measures, for transfers of personal data from the EEA, UK, or Switzerland to the United States.

8. Data retention

  • Platform account and contract data: retained for the duration of your contract or account, plus any period required by law or for litigation holds;
  • Marketing and sales communications: retained for up to 24 months after the last interaction, or until you request deletion;
  • Analytics and session data: governed by Google and Microsoft retention policies; we do not independently store raw session recordings.

9. Your rights under GDPR and UK data protection law

If you are located in the European Economic Area, the UK, or Switzerland, you have the following rights:

  • Access: request a copy of the personal information we hold about you;
  • Rectification: ask us to correct inaccurate or incomplete information;
  • Erasure: request deletion of your personal information in certain circumstances;
  • Restriction: ask us to limit the processing of your information;
  • Objection: object to processing based on legitimate interests, including direct marketing;
  • Data portability: receive your data in a structured, commonly used format;
  • Withdraw consent: withdraw consent for analytics cookies and session recordings at any time;
  • Complaint: lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at [email protected]. We aim to respond within 30 days.

10. Opting out of analytics and session recordings

You can opt out of Google Analytics and Microsoft Clarity at any time:

  • Click the “Opt out” button in the cookie/tracking notice banner;
  • Use the “Opt out of analytics” button on the Cookie Policy page;
  • Install the Google Analytics Opt-out Browser Add-on;
  • Disable cookies and local storage in your browser settings.

Opting out stops new data collection. It does not delete data already collected by Google or Microsoft; contact those providers directly for deletion requests.

11. AI and automated decision-making

Myhanko’s platform includes an AI-assisted risk analysis feature that flags contract clauses that deviate from an approved template. This feature is advisory only. It does not make binding legal decisions, edit contracts autonomously, approve deviations, or sign documents on behalf of any person. Human reviewers and approvers remain responsible for all legal outcomes.

12. Children’s privacy

Our website and platform are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it promptly.

13. Security

We use technical and organizational measures to protect personal information, including encryption in transit, access controls, and audit logging. No system is completely secure, and we cannot guarantee absolute security.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes will be highlighted in the banner on your next visit.

15. Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at [email protected].