PrivacyPolicy.

This Privacy Policy explains how Signvoy Inc. (“Signvoy”, “we”, “us”) collects, uses, and safeguards information when you use our website and electronic-signature platform (the “Service”). We act as a data controller for account information and as a data processor for the documents and signer data you upload on behalf of your signers.

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account data — name, email address, organization, and authentication identifiers provided when you sign up.
• Document & signature data — the files you upload, the fields you place, and the signatures, initials, and form values collected from signers.
• Audit metadata — IP address, timestamps, user agent, and event history captured to build the tamper-evident audit trail.
• Usage & device data — pages viewed, features used, and diagnostic information collected via cookies and similar technologies.
• Billing data — handled by our payment processor; we never store full card numbers.

We use the information above to:

• Provide, operate, and secure the Service.
• Generate legally-binding signing workflows and audit certificates.
• Send transactional email (signing requests, reminders, completion notices) and, where permitted, product updates.
• Detect, prevent, and investigate fraud and abuse.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal data, and we do not use the contents of your documents to train machine-learning models.

Where the GDPR applies, we process personal data on the bases of performance of a contract (providing the Service), our legitimate interests (securing and improving the Service), your consent (optional marketing and non-essential cookies), and compliance with legal obligations.

We share data only with vetted sub-processors who help us run the Service — cloud hosting, email delivery, payment processing, and error monitoring. Each is bound by a data-processing agreement and may only use data on our instructions.

We may also disclose information when required by law, to protect our rights, or in connection with a merger or acquisition (with notice to you).

We retain completed documents and their audit trails for as long as your account is active, plus any period required to meet legal or compliance obligations. You can delete documents at any time; deleted data is purged from primary systems promptly and from backups within 30 days. When you close your account we delete or anonymize your personal data unless retention is legally required.

We protect data with encryption in transit (TLS 1.2+) and at rest, strict access controls, and continuous monitoring. Signed documents are sealed with a cryptographic hash so any post-signature tampering is detectable. No method of transmission or storage is 100% secure, but we work hard to protect your information and to notify you promptly of any breach affecting your data.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@signvoy.com. We will respond within the timeframe required by applicable law.

If Signvoy processes data on behalf of your organization, please direct requests to that organization, which controls the data.

We may update this policy from time to time. Material changes will be announced on this page and, where appropriate, by email. The “Last updated” date above always reflects the current version.

Questions about privacy? Email support@signvoy.com or visit our contact page.