We collect only what the legal force of a signature and the operation of the service require. Data is not sold and is not passed to third parties for advertising.
01What we collect
Account data: name, email, phone, company name and registration number.
Signing data: the signer's name, email or phone, IP address, device and browser details, the exact time of signing and of consent, the version of the consent text and the signature image.
Technical and server logs: sign-ins, actions on documents, server access, network requests (including IP address and browser data) and error records.
02Why we use it
To confirm a signature, compose the evidence record, send SMS codes and notifications, issue invoices and provide support.
The grounds for processing are performance of the contract between us, a legal obligation such as accounting, and the legitimate interest of both parties in preserving evidence for a possible dispute.
For statistics we use only aggregated data from which a person cannot be identified.
03Where it is stored
The immutable evidence archive is located in the European Union (Frankfurt). Once written, a record cannot be altered or deleted before its term — neither by us nor by the storage provider.
The application, the database, document files and the immutable evidence archive are hosted on Google Cloud and other certified providers within the European Union. A data processing agreement is in place with each of them.
Data is encrypted both in transit (TLS 1.3) and at rest (AES-256).
04Who receives it
The SMS provider receives only the phone number and the code text. The email provider receives only the address and the message.
The immutable archive provider receives the evidence record, the signed document and the system logs. Records are stored encrypted, within the European Union.
State authorities receive data only in cases provided by law, on a reasoned request. We will tell you about such a request unless the law forbids us to.
05Your rights
You may request a copy of your data, its correction, deletion or a restriction on processing. We answer within 10 working days.
The evidence record cannot be deleted. It is kept for 10 years on the ground of legitimate interest, namely proving that signing took place should a dispute arise. The document file itself can be deleted at any time.
If you believe your rights have been breached, you may complain to the Personal Data Protection Service.
Technical and server logs are written to the immutable archive as well — this is what proves that the evidence itself was not tampered with. Because the archive is technically immutable, these records cannot be deleted before their term; on request we will tell you what records about you exist.
06Cookies
We use only necessary cookies: keeping the session, the language choice and a security check.
We use no advertising or tracking cookies. Statistics are collected in aggregate, without identifying a person.
You can restrict cookies in your browser settings, though signing in may then stop working.