Privacy Policy

This Privacy Policy explains how SignBuddy ("we", "us", or "our") collects, uses, and protects your personal data when you use our electronic signing platform and website. We are committed to handling your information transparently and in line with the GDPR.

1. Information we collect

We collect information you provide directly and data generated when you use the service:

• Account data — name, email address, telephone, organization details, and password credentials.
• Document & signing data — contracts you upload, signer details, signatures, and verification records.
• Audit data — IP address, browser/device information, timestamps, and (where enabled) GPS location captured at the time of signing.
• Usage data — how you interact with the platform, for security and product improvement.

2. How we use your information

• To provide and operate the signing service and your account.
• To verify signer identity (email, OTP, BankID) and produce tamper-evident audit trails.
• To anchor cryptographic proof of signed documents to public timestamping records.
• To communicate with you about contracts, security, and service updates.
• To comply with legal obligations and prevent fraud or abuse.

3. Legal basis for processing

We process personal data on the basis of contract performance, your consent, our legitimate interests in operating a secure service, and compliance with legal obligations.

4. Data sharing

We do not sell your personal data. We share it only with service providers that help us operate the platform (such as hosting, email delivery, identity verification, and payment processing), and where required by law.

5. Data retention

We retain personal data for as long as your account is active and as needed to provide the service and meet legal requirements. Signed documents and their audit trails may be retained to preserve their evidentiary value.

6. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, see our GDPR page or contact us.

7. Security

We use encryption in transit and at rest, access controls, and continuous monitoring to protect your data. No method of transmission is completely secure, but we work to safeguard your information.

8. Contact us

If you have questions about this Privacy Policy, contact us at privacy@signbuddy.eu.

This document is a general template and should be reviewed by qualified legal counsel before publication.