Privacy Policy
Draft for legal review. This policy is a placeholder and has not been reviewed by a lawyer. It will be replaced before eSignIt is generally available.
Who we are
eSignIt provides electronic signature services to organisations. For documents a company sends, that company is the controller and eSignIt processes the data on its behalf.
What we collect
- Account data: names, work emails and roles of the people a company adds; sign-in events.
- Documents: the PDFs companies upload, signers' entries and adopted signature images.
- Signing evidence: email delivery, verification codes (stored only as hashes), consent, times, IP addresses and browser details, recorded in each document's audit trail and Certificate of Completion.
How we use it
To deliver documents, verify signers, produce and seal completed documents, deliver them to the systems the company connects, prevent abuse, and support customers. We don't sell personal data or use documents to train models.
Where it's stored
On Amazon Web Services in the United States. Each company's documents are encrypted with a key of its own. Sub-processors: Amazon Web Services (hosting, email), Cloudflare (sign-up bot check), and the systems a company chooses to connect.
Retention
Completed documents are kept for the company's retention period (seven years by default). Documents of cancelled or expired envelopes are deleted after 90 days; their audit trails are kept.
Your rights
Signers should contact the company that sent them a document. Account holders can contact their company admin or us.