Privacy Policy
Last Updated: [fill in]
1. Introduction
- GDPR (European Union)
- CCPA (California)
- U.S. data protection and electronic signature laws
2. Data We Collect
We only collect data necessary to provide and improve our service.
2.1 Account Information
- Email address
- Encrypted password
- Optional name
- Account preferences
- Login history
2.2 Document Data
- Documents uploaded by users
- Signer information
- Signature fields and metadata
- Final PDF files
- Stored content provided by you
2.3 Signature & Audit Trail Data
- IP address
- Browser user-agent
- Timestamps
- Proof of acceptance
- Technical verification data
2.4 Payment Data
2.5 Technical Logs
- IP address
- Device information
- Cookie identifiers
- Security logs
- Usage logs
3. Cookies & Tracking
We use:
- **Google Analytics**
- **Meta Pixel**
- **Hotjar**
- Essential cookies (login, security, CSRF, session)
- Analytical and marketing cookies (where allowed)
Users in the EU will see a consent banner.
4. How We Use Your Data
We use your data to:
- Provide and operate the eSignature service
- Authenticate users
- Generate audit trails
- Deliver documents and notifications
- Process payments
- Prevent fraud
- Improve and secure the platform
- Comply with legal obligations
We **do not** sell your data.
5. Legal Basis (GDPR)
- Contract performance (using the service)
- Consent (analytics & marketing cookies)
- Legitimate interest (security, fraud prevention)
- Legal obligation (record-keeping for signatures)
6. Document Storage
Documents are stored **as long as your account remains active**, unless you delete them yourself. Deleting a document permanently removes it after a short technical delay. If you delete your account, all your data and documents will be permanently removed unless we are required by law to retain minimal verification data.
7. Data Sharing
We only share data with trusted service providers:
- **Stripe** (payments)
- **Resend** (email delivery)
- Hosting & infrastructure providers
- Analytics services (Google, Meta, Hotjar)
We do **not** sell your data to advertisers or brokers.
8. Your Rights (GDPR & Global Privacy Laws)
You may:
- Access your data
- Correct inaccurate data
- Download or export your data
- Delete your account and all associated data
- Withdraw cookie consent
- Object to certain processing
- File a complaint with a data protection authority
9. Security
We use industry-standard protections, including:
- Encryption in transit (HTTPS)
- Encryption of sensitive data
- Secure storage and backups
- Access controls
- Activity and security logs
- Regular monitoring
10. International Data Transfers
Your data may be stored and processed in the United States. Where required, we implement GDPR-compatible safeguards (such as Standard Contractual Clauses).
11. Policy Changes
We may update this Privacy Policy as our service evolves. The 'Last Updated' date at the top of this page indicates the most recent version.
12. Contact
Questions sur notre politique de confidentialité ?
Contactez-nous pour toute question concernant la protection de vos données.
Commencer gratuitement