Cookie Policy

Last updated: 10/26/2025

1. What Are Cookies and Similar Technologies?

Cookies are small text files stored on your device when you visit trato.io and use our Contract Lifecycle Management services. These technologies help us provide, secure and improve our platform while delivering personalized experiences for contract management, electronic signatures and AI-powered legal solutions.

We use various types of cookies, including essential cookies for platform functionality, performance cookies for analytics, and preference cookies to remember your settings. Our blockchain-based security protocols and AI-powered contract analysis tools may also use similar technologies to enhance service delivery and maintain compliance with international security standards, including GDPR, eIDAS, HIPAA and NOM-151 certifications.

2. Types of Cookies We Use

Essential Cookies: Required for core platform functionality, including user authentication, session management, security protocols and access to your contract management dashboard. These cookies enable electronic signature processes, document encryption and secure data transmission across our global infrastructure.

Performance and Analytics Cookies: Help us understand how users interact with our Contract Lifecycle Management platform, identify popular features and optimize system performance. These cookies collect aggregated data about page views, feature usage and navigation patterns to improve our artificial intelligence algorithms and user experience.

Functional Cookies: Remember your preferences, language settings, dashboard configurations and personalization options. These cookies enhance your experience by maintaining your preferred contract templates, notification settings and integration settings with CRM systems like Salesforce and HubSpot.

3. Third-Party Cookies and Integrations

TRATO Legaltech integrates with various third-party services to enhance platform functionality, including analytics providers, payment processors and over 5,000 applications through Zapier connectivity. These integrations may place their own cookies on your device, subject to their respective privacy policies.

Our platform connects with external services for CRM integration, document storage, payment processing and customer support. While we carefully select integration partners and implement security protocols, users should review the cookie policies of any third-party services they choose to connect with our platform. We maintain strict data protection standards for all integrations to ensure compliance with international privacy regulations.

4. Cookie Management and User Control

You can control cookie settings through your browser preferences, though disabling certain cookies may affect platform functionality. Most browsers allow you to view, delete and block cookies, and we provide detailed controls within your TRATO account settings to manage non-essential cookies.

To maintain optimal performance of our Contract Lifecycle Management services, electronic signature capabilities and AI-powered features, we recommend allowing essential cookies. You can modify your cookie preferences at any time through your account dashboard or browser settings. Changes to cookie settings may require re-authentication and could affect saved preferences and customizations.

5. Data Protection and Cookie Security

All cookies used by TRATO Legaltech are protected by bank-level encryption and security protocols. We implement two-factor authentication (2FA), geolocation verification and blockchain technology to ensure maximum security of cookie data and associated user information.

Our cookie practices comply with international data protection regulations, including GDPR for European users and LFPDPPP for Mexican users. Cookie data is processed according to our comprehensive Privacy Policy, and users maintain rights to access, modify or delete cookie-related information as permitted by applicable law. We conduct regular security audits and maintain strict access controls for all cookie-related data.

6. Cookie Retention and Data Lifecycle

Cookie retention periods vary based on purpose and type. Session cookies are automatically deleted when closing the browser, while persistent cookies remain for specific periods to maintain your preferences and improve platform performance.

Essential cookies for security and authentication typically remain active during your session and for brief periods afterward to maintain platform integrity. Performance and preference cookies may be retained for longer periods to analyze usage patterns and maintain your customized settings. All cookie data is subject to our data retention policies and is securely deleted when no longer needed for its intended purpose.

7. Cookie Practice Updates

TRATO Legaltech may update cookie practices to reflect changes in technology, legal requirements or platform improvements. Significant changes to our cookie usage will be communicated through platform notifications, email updates or revisions to this Cookie Policy.

We continuously evaluate and improve our cookie practices to enhance user experience while maintaining strict security and privacy standards. Users will be notified of material changes affecting their cookie preferences or data processing practices. Continued use of our platform after updates constitutes acceptance of revised cookie practices, though users may modify their preferences at any time.

8. International Cookie Compliance

Our cookie practices comply with international regulations, including the EU Cookie Directive, GDPR requirements for European users and applicable privacy laws in Mexico, United States and other jurisdictions where TRATO operates.

We implement region-specific cookie controls and consent mechanisms as required by local regulations. European users receive explicit consent options for non-essential cookies, while users in other jurisdictions receive appropriate notices and control mechanisms. Our global compliance approach ensures consistent protection standards while respecting local legal requirements and cultural preferences.

9. User Rights Related to Cookies

Users have specific rights regarding cookie data processing, including the right to be informed about cookie usage, consent to non-essential cookies, access cookie-related data and request deletion of cookie information.

European users enjoy comprehensive rights under GDPR, including the right to withdraw consent, object to processing and receive cookie data in portable formats. Mexican users have ARCO rights (Access, Rectification, Cancellation, Opposition) regarding cookie data. Users in all jurisdictions can contact our privacy teams to exercise their rights or raise concerns about cookie practices through the contact information provided in our Privacy Policy.

10. Contact Information for Cookie Inquiries

For questions about our cookie practices, data processing or to exercise your rights regarding cookie data, contact the appropriate TRATO Legaltech entity based on your jurisdiction.

European users should contact TRATO Legaltech, S.L. at Plaza Jacinto Benavente, número 2, 4º Piso, 28012-Madrid, Spain, or by email at privacy.es@trato.io. Users in Mexico and other regions should contact Contratosapp, S.A.P.I. de C.V. at Pasaje Interlomas número 39, Oficina 108, Colonia Bosques de las Palmas, Huixquilucan, Estado de México, México, código postal 52787, or by email at privacy.mx@trato.io. Our privacy teams respond to cookie-related inquiries within timeframes established by applicable regulations.

TRATO Legaltech | AI-Powered Contract Management Platform