This Privacy Policy applies to Midly CLM (app.midly.ai) and all services operated by Midly Labs Inc. at midly.ai. For our other products, see midlylabs.com/privacy.
Midly Labs Inc., incorporated in Georgia, United States. Questions about this policy: privacy@midly.ai
Information You Provide
Information Collected Automatically
From Third Parties
To provide Midly CLM, process payments, manage your account, send transactional emails, improve the platform, monitor security, and comply with legal obligations.
We do not sell or rent your data. All providers are contractually bound to protect your data.
All contracts and documents you create in Midly CLM remain your property. We store them securely to provide the service. We do not access your contract content except to provide technical support when authorized by you.
Midly CLM is designed for organizational use. If you use Midly CLM on behalf of an organization, your organization is the data controller and Midly Labs acts as data processor. We will enter into a Data Processing Agreement (DPA) upon request at privacy@midly.ai.
In addition to the contract content you create, Midly CLM automatically collects workflow and platform data as a byproduct of your use of the Service. This includes: contract creation timestamps, status transitions (draft → review → signed → voided), counterparty response times, clause-level edit and negotiation patterns, feature usage frequency, and deal cycle durations.
This data is collected in aggregate and used to improve the platform, generate anonymized benchmarks, and develop product features. It is not linked to your identity in any reports shared outside Midly Labs.
Enterprise customers and organizations using Midly CLM may request a Data Processing Agreement (DPA) governing how Midly Labs processes personal data on their behalf. Enterprise DPAs may include provisions for:
To request a DPA or exercise enterprise data rights, contact privacy@midly.ai.
TLS/HTTPS encryption in transit, encryption at rest, role-based access controls, Clerk authentication, and regular monitoring. We will notify you of any breach affecting your data within 72 hours under GDPR.
To exercise any right: privacy@midly.ai. We respond within 30 days.
Essential session and authentication cookies are required for the platform to function. We do not use advertising or cross-site tracking cookies.
Midly CLM is not directed to anyone under 18.
Data from EEA and UK users is transferred to the US under Standard Contractual Clauses (SCCs).
We will notify registered users by email for material changes and update the Last Updated date at the top of this page.
privacy@midly.ai
Midly Labs Inc., Atlanta, Georgia