Privacy Notice

Signavos (trading name) — operator of the Service. Registered address: [Registered address of the operating legal entity]. Privacy contact: support@signavos.com.

Account identity. When you sign up or sign in, our identity provider (Clerk) provides us your name and email address. We use it to create and operate your account and to provide the Service. We do not handle passwords — sign-in uses secure links or your provider's session.

Documents and signatures. The PDFs you upload, the signature fields you place, and the signatures collected. We use this to provide the Service (storing and delivering your documents, sending signing invitations by email via Resend, and maintaining the audit trail). Recipient names and email addresses are stored with your documents; the emails are encrypted at rest.

Payments. Payment data is collected and handled by Paddle, the merchant of record, as its own controller — we do not receive or store your card details. Paddle processes the transaction, billing, tax, and invoicing. See Paddle's privacy policy for how Paddle handles payment data.

Usage and technical data. We keep an audit trail of document lifecycle events (upload, send, view, sign, completion) with timestamps and basic request metadata (for security, fraud prevention, and debugging), plus standard server logs. We use this to secure and improve the Service and to provide support.

We share data only with the service providers that run the Service (hosting, object storage, email delivery, analytics and error monitoring) as needed to provide it, and with Paddle, the merchant of record, for the sale of the Service, subscription management where applicable, payment processing, and tax compliance and invoicing. We do not sell personal data. We may disclose data to professional advisers or authorities where required by law or to protect the rights and safety of users and the Service.

Documents and related data are kept until you delete them. When you delete a document it is permanently purged from the application, storage, and database, while a minimal audit record is retained to preserve the integrity of the audit trail. Payment records are retained by Paddle as required by applicable law.

We apply appropriate technical and organisational measures, including encryption in transit and at rest and access controls, to protect the data we hold within the limits of the Service.

We use only the cookies required for the Service to function (for example, to keep you signed in) and, where analytics/error monitoring is enabled, privacy-respecting analytics. You can manage cookie preferences through your browser.

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can delete documents from the dashboard; for anything else, email us and we'll help. If you are in the UK or EEA you also have the right to complain to the Information Commissioner's Office (UK) or your local data protection authority, and we will respond to a request within one month, extendible as allowed by law.

Where your data leaves the UK or EEA (for example, to US-based processors), we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision. Contact us for details of the transfer mechanisms we use.

Privacy questions: support@signavos.com. Legal requests: support@signavos.com.