Privacy Policy

1. Scope and service design

SignuDoc is a U.S.-focused electronic-signature service designed for ordinary business agreements and similar commercial workflows. This Privacy Policy applies to account holders, signers, website visitors, and support contacts who interact with SignuDoc.

SignuDoc is not intended for legally required consumer disclosure workflows that need a separate E-SIGN consumer-consent process. If a sender uses SignuDoc outside that scope, the sender remains responsible for making sure the workflow is legally appropriate.

2. Information we collect

We may collect the following categories of information:

• Account information, such as name, email address, password credentials, email-verification status, session data, and profile updates.
• Document and workflow data, such as uploaded PDFs, document titles, page counts, placed fields, signer routing order, envelope status, and related metadata.
• Signer and signature data, such as signer names and email addresses, typed signature values, drawn signature images, dates, text entries, checkbox selections, and decline reasons.
• Audit and security data, such as IP address, browser or device information, timestamps, token identifiers, record access events, sending events, reminder events, signing events, and system-generated audit trails.
• Support and communications data, such as emails you send to SignuDoc, account-closure requests, privacy requests, and feedback about accessibility or product issues.
• Cookies and local state, such as authentication cookies, session information, and limited browser-side data needed to operate the application securely.

3. Where the information comes from

We collect information directly from you when you:

• create or use an account;
• upload or send a document;
• complete, decline, or download a signing package;
• communicate with us by email or through support channels; or
• browse or interact with the website.

We also generate information automatically when SignuDoc records audit events, sends transactional emails, secures sessions, enforces rate limits, or stores completed records.

4. How we use information

We may use information to:

• create and manage accounts;
• deliver signing workflows and completed document packages;
• verify email addresses and send transactional messages;
• maintain envelope history, audit trails, and security logs;
• prevent fraud, abuse, and unauthorized access;
• respond to support, privacy, and accessibility requests;
• comply with legal obligations, enforce agreements, and resolve disputes; and
• improve the reliability, security, and usability of the service.

5. How we share information

We may share information with service providers that help us operate SignuDoc, such as providers for authentication, cloud storage, email delivery, hosting, infrastructure, logging, security, and customer support.

We may also disclose information when reasonably necessary to comply with law, respond to legal process, protect the rights or safety of SignuDoc, users, or the public, or in connection with a merger, acquisition, financing, or asset sale.

SignuDoc is not built as an advertising-supported service. If that changes, we will update this Privacy Policy before using personal information in a materially different way.

6. Retention

Unsent draft envelopes and their uploaded source documents may be deleted after a period of inactivity, such as 30 days without sender activity.

Completed, declined, and voided envelopes remain available while your account is active so you can access signed documents and audit history. We also keep related audit and security records for as long as reasonably necessary to operate the service, prevent abuse, comply with legal obligations, resolve disputes, and enforce agreements.

If you close your account, we may provide a limited export window and then delete stored document files and related envelope records, except limited information we need for security, fraud prevention, legal compliance, or dispute resolution.

7. Security

SignuDoc uses administrative, technical, and physical safeguards that are designed to protect personal information, including authenticated access controls, audit logging, rate limiting, security headers, and cloud-storage controls. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your privacy rights

Depending on where you live and the nature of your relationship with SignuDoc, you may have rights to:

• know or access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of information, subject to legal exceptions;
• receive a copy of certain information we can provide manually;
• withdraw consent where a processing activity depends on consent; and
• be free from discrimination for exercising applicable privacy rights.

California residents may also have rights to request the categories and specific pieces of personal information we collected about them, request correction of inaccurate personal information, and request deletion, subject to applicable exemptions.

9. How to exercise your rights

To request access, correction, deletion, or account closure, email support@signudoc.app or use the in-app account-closure request flow when available.

We may ask you to verify your identity before we act on a request. For example, we may ask you to confirm control of the relevant email address, identify recent account activity, or provide envelope details sufficient to locate the records you want us to review.

Where California law applies, we aim to respond within 45 calendar days of a verifiable request and may extend once by another 45 days where permitted by law. Where GDPR or similar laws apply, we aim to respond within one month, subject to lawful extensions for complex or numerous requests.

10. Cookies and local storage

SignuDoc uses cookies and similar technologies primarily for authentication, session continuity, security, and basic application state. We may also store limited local settings needed to make the app usable, such as interface preferences and page state for active workflows. For sender workflows, draft PDF previews may be cached locally in the browser (IndexedDB) for up to 24 hours to improve document preparation performance.

11. Children and international use

SignuDoc is not directed to children under 13, and we do not knowingly collect personal information from children through the service. If you believe a child provided personal information to us, contact us so we can review and address the issue.

SignuDoc is operated for U.S.-focused business use. If you access the service from outside the United States, you understand that information may be processed and stored in the United States or other locations where our service providers operate.

12. Changes and contact

We may update this Privacy Policy from time to time by posting a revised version on this page. Material changes will apply when posted unless a later date is stated.

Privacy questions, requests, and complaints may be sent to support@signudoc.app or through the Contact page.