Icertis, Inc. and its affiliates and subsidiaries (“Icertis”, “We”, and “Us”) are committed to protecting your privacy and providing you with a safe online experience. This Privacy Policy covers the collection, use and disclosure of information collected through the website at (the “Icertis Web Site”)  and the information processed through the Icertis Contract Management Platform (“Platform”). This policy is updated and the policy is effective from 26-Dec-2019. The Platform will process personal data only in accordance with the documented instructions of Subscriber (and not for any other purpose) and applicable data protection laws, including those regarding transfers of personal data to any jurisdiction outside the European Economic Area.

U.S—E.U. Privacy Shield

Icertis complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as administered by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. Icertis has certified to the Department of Commerce that it adheres to the Privacy Shield Principles (as defined and described at the Privacy Shield website listed below). If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit

Icertis’s participation in the Privacy Shield applies to all personal data that is subject to the Icertis Privacy Statement and is received from the European Union and the European Economic Area. Icertis will comply with the Privacy Shield Principles in respect of such personal data.

Icertis’s accountability for personal data that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Icertis remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless Icertis proves that it is not responsible for the event giving rise to the damage.

We encourage you to contact us should you have a Privacy Shield-related (or general privacy-related) complaint by using the information provided on the “Contact Us” page on the Icertis Web Site. For any complaints that cannot be resolved with Icertis directly, Icertis has chosen to use JAMS as the recourse mechanism (as further described in the Privacy Shield Principles). As further explained in the Privacy Shield Principles, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. Icertis is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Collection of your Personal Information

Depending on the context in which you interact with us, Icertis may collect or receive personally identifiable information, such as your e-mail address, name, home or work address or telephone number and company information such as business address and employee count.  We may collect this information when you submit requests to us or send us email in the context of our relationship as an actual or potential service provider to you.  We also might obtain information from third party business partners, such as contact information provided by any of our referral partners.

There is also information about your computer hardware and software that is automatically collected by Icertis on the Icertis Web Site. This information can include: your IP address, browser type, domain names, access times and referring web site addresses. This information, which does identify individual users, is used by Icertis to sell and market Icertis’s services, and to provide general statistics regarding use of the Icertis Web Site.

Use of your Personal Information

Icertis collects and uses your personal information to operate the Icertis Web Site and deliver the Platform and related services. Icertis may also use your personally identifiable information to inform you of other products or services available from Icertis and its affiliates.

Information Sharing

We will share your personal information with third parties only in the ways that are described in this privacy policy. Icertis does not sell, rent or lease its customer lists to third parties.

Icertis may share data with affiliates and subsidiaries, trusted partners and our own service providers, to help us perform statistical analysis, send you email or postal mail, provide customer support, and support our business and the services and Platform we provide. All such third parties are prohibited from using your personal information except to provide these services to Icertis and they are required to maintain the confidentiality of your information.

Icertis will disclose your personal information, without notice, only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process, such as a subpoena, served on Icertis or the site; (b) protect and defend the rights or property of Icertis; and, (c) act under exigent circumstances to protect the personal safety of users of Icertis, or the public.

If Icertis is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Web site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

Use of Cookies

The Icertis Web Site uses “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your local storage by a web page server. Cookies are useful to personalize your online experience.

Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to disable and manage your cookies settings. If you disable cookies you may still browse public areas of the Site, but some features and Services may not function.

Site Analytics. As is true of most web sites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use automated devices and applications, such as Google Analytics, to evaluate usage of our Site. We also may use other analytic means to evaluate our Services. We use these tools to help us improve our Services, performance and user experiences. We may link this automatically-collected data to personally identifiable information.

Advertising. We partner with third parties to either display advertising on our the Icertis Web Site or to manage our advertising on other sites. Our third-party advertising partners may use technologies such as cookies to gather information about Visitor and Customer activities on the Icertis Web Site and other sites in order to provide advertising based upon Visitor and Customer browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out at (or if located in the European Union, Please note this does not opt you out of being served ads on our Icertis Web Site.

Security of your Personal Information

The security of personal information is very important to us. Icertis puts measures in place to secure your personal information from unauthorized access, use or disclosure. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. When sensitive information (such as log-in credentials) is submitted, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol. That said, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot guarantee its absolute security. If you have any questions about security on the Icertis Web Site, you can contact us at

Change and Removal of Personal Information

Please contact us at or for requests to access, correct, amend, delete, or limit the use or disclosure of your personal information. We will respond to your request within a reasonable timeframe

We will retain your information for as long as your account is active, as needed to provide you services and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.


If you subscribe to our newsletter(s), or if otherwise permitted by law, we will use your name and email address to send promotional material and periodic updates to you. You may choose to stop receiving these communications by following the unsubscribe instructions included in these emails or you can contact us at

Third Party Links

Our Site includes links to other web sites whose privacy practices may differ from those of Icertis. If you submit personal information to any of those sites, your information is governed by their privacy policies. Icertis is not responsible for the privacy statements or other content on web sites outside of the Icertis Web Site.

Data Processed through the Icertis Platform

Icertis may process customer personally identifiable information and third party personally identifiable information under the direction of our Customers, who are the controllers of that data. We have no ownership of this information of individuals whose personally identifiable information may be processed as part of the use of our Platform.

An individual who seeks access to their data, seeks to correct, amend or delete inaccurate data, or that wishes to opt-out of communications sent from us on behalf of an Icertis customer, should direct his/her query to the Icertis customer he/she interacts with directly (the data controller). If an Icertis customer requests that we remove personally identifiable information on their behalf, we will respond to their request within 30 days.

Icertis may transfer personal information to other companies that help us manage our Platform. Transfers to subsequent third parties are covered by the provisions in this Policy regarding notice and choice and the service agreements with our customers.

Clients who use the Icertis Platform may submit the personal information of other individuals at their organization to register them as authorized users. It is the customer’s obligation, as the data controller, to inform its authorized users about the purposes for which information about them is collected and may be used on this Platform.

Data Subject rights

Taking into account the nature of the processing, Icertis shall at all times cooperate with and assist our customers in so far as possible to enable them to meet applicable deadlines and requirements under applicable data protection laws in relation to a data subject’s right (i) of rectification of personal data, (ii) of erasure of personal data, (iii) to restriction of processing of personal data, (iv) to portability of personal, (v) to object to the lawfulness of the processing of personal data, and (vi) to not be subject to a decision based solely on automated processing.

Updates to the Privacy Policy

This Policy may be amended from time to time, consistent with the Privacy Shield Principles and applicable data protection and privacy laws and principles. We will notify you of changes to this Policy either by posting to our intranet, through email, or other means. We will notify customers if we make changes that materially affect the way we handle personal data that we previously collected, and we will allow them to choose whether their personal data may be used in any materially different manner.

Contact Information

If you believe that Icertis has not adhered to this Statement or have questions, please contact Icertis at Or you can reach us by telephone or mail at the contact information listed at You also have the option of filing a complaint with JAMS, an independent dispute resolution body located in the United States. Icertis has designated JAMS as its independent dispute resolution body, and Icertis shall be solely responsible for all costs associated with any complaints filed with JAMS regarding the violation of this policy. Information about filing a complaint with JAMS can be found at its website:

EU Representative
Name: Peter J Kramer
Icertis GmbH Skyper
60329 Frankfurt a.M.

Data Protection Officer
Name: Sandeep Kulkarni
5th Floor, Tower A, ICC Tech Park, SB Road
Pune  Maharashtra  411016