SigFetch Privacy Policy

We may collect information including, but not limited to:

• Account information (name, email, password if you register).
• If you sign in with Google or via an emailed sign-in link, the name and email address associated with that provider or address.
• Documents, files, signatures, and related data you upload or create.
• If you are asked to sign a document (signers do not need an account): your name and email address (provided by the sender), the signature and field values you enter, and — at the moment you sign — your IP address, browser user-agent, and a timestamp of your consent to sign electronically.
• Basic usage data (IP address, device type, logs).
• If you donate, our payment processor collects the payment information needed to complete the charge. We may receive your name, email address, the amount, and limited payment metadata. We do not store full payment card numbers. Donating does not change this Policy or create additional privacy rights.

If you send a document. You represent that you have a lawful basis and any required consent to give us the recipient's name, email address, and any other personal information you submit about them, to have us email them a signing request, and to have the completed record shared with the parties to that document.

Signing metadata is part of the record by design. The IP address, browser, timestamps, and consent captured when you sign become part of the audit trail for that document or envelope and are printed in the Certificate of Completion that accompanies the final signed PDF. That certificate is delivered to the sender and recipients of the document or envelope, and we cannot remove it from copies they hold. If you do not want this information recorded and shared with the other parties to the document, do not sign.

We may use cookies or similar technologies, including local storage, for sign-in sessions, preferences, security, and basic usage measurement. You can control cookies through your browser, though some features may not work without them. We do not respond to Do Not Track signals.

We use this information to provide, operate, maintain, and improve the Service, to communicate with you, and to comply with legal obligations. We may also use your contact information to notify you about SigFetch or other websites and services operated by us or our affiliates.

We do not use an email address a sender gave us solely so that person could be asked to sign for promotional messages about SigFetch or any affiliated service, unless that person has their own account or has separately opted in. Transactional messages — signing invitations, completion notices, and account or security notices — are not promotional and may still be sent.

You may opt out of promotional communications at any time using the unsubscribe link in any such email.

Our access to your documents. We may access, review, use, and retain your documents, the values entered into them, and your account records, at our sole discretion and without notice, for any purpose we consider appropriate. This includes operating, maintaining, securing, testing, analyzing, developing, and improving the Service; providing support; investigating suspected violations of our Terms of Service; and investigating, preventing, or reporting suspected fraudulent, deceptive, or illegal activity.

Nothing in this Policy obliges us to review, monitor, screen, verify, or act on any document, account, or report, and we do not undertake to do so. Any review we carry out is entirely at our discretion.

We do not sell your personal information or documents.

We may share information with the following, among others:

• The parties to a document or envelope. Signed documents, the audit trail, and the Certificate of Completion (including signer names, email addresses, signing timestamps, IP addresses, and browser information) are shared with the sender and recipients of that document or envelope. This is the Service functioning as intended.
• Service providers who process information on our behalf. These may include providers of cloud hosting and storage; email and transactional messaging; payment processing for voluntary donations; authentication, including Google sign-in if you choose it; error logging, security, and basic analytics; and customer-support tooling. We may change providers at any time. If you sign in with Google, Google's own terms and privacy policy also apply to that sign-in.
• Our affiliates (entities under common ownership or control) for operational or promotional purposes.
• Law enforcement, government agencies, or other affected people or organizations — where required by law, or where we consider it appropriate, at our sole discretion, to investigate, prevent, or report suspected fraud, impersonation, or other illegal activity, or to protect the rights, property, or safety of any person. This may include telling people who were sent documents through the Service that those documents were fraudulent. We are under no obligation to make any such disclosure or notification.
• A buyer, investor, or successor entity, in the event of a merger, acquisition, financing, or sale of assets.

Document verification. Anyone in possession of a final signed PDF can check it at sigfetch.com/verify. A successful verification displays the name of the document or envelope, the names of the files it contains, and the signers' names with their signing status and dates. It does not display signer email addresses or IP addresses.

While we take reasonable measures to protect your information, no system is completely secure, and we cannot guarantee the security of your data. You use the Service and upload documents entirely at your own risk.

Descriptions of our technical and security practices that appear on the Site, including at sigfetch.com/security, are informational and current only as of when they were written. They may change without notice, are not warranties or certifications, and are not part of this Policy. Section 8 of our Terms of Service governs.

The Service is not offered as HIPAA-compliant, as SOC 2 audited, or as a qualified or advanced electronic signature service under EU law. Do not upload information you are not willing to have handled as described in this Policy.

Security incidents. No system is completely secure. If we determine that notice of a security incident is required by applicable law, we will provide the notice that law requires. Where notice is not required by law, whether, when, and how we notify anyone is at our discretion.

Our liability (if any) is strictly limited as described in our Terms of Service.

As a free service, we may delete any or all data at any time, with or without notice. We have no obligation to retain your documents or account indefinitely.

You are solely responsible for downloading and keeping your own permanent copies of all documents and signed records. We do not guarantee storage, backup, or long-term availability of any information.

Documents other people are party to. When a sender closes their account, we may keep the documents or envelopes they sent, the files themselves, and the audit trail, separated from the closed account, so that other parties to those documents may continue to have access to what they signed. We may also retain any records at our sole discretion, including to investigate or report suspected fraud or illegal activity or to comply with law. We are under no obligation to retain anything, and may delete any of it at any time without notice.

You may request access to or deletion of your personal information by emailing support@sigfetch.com. This applies to signers as well as account holders — you do not need an account to make a request. We may need enough information to verify that you are the person the request is about before we act on it. If we delete your account at your request, most associated data is deleted with it, but some logs may be retained for legal or security reasons, and audit records embedded in signed documents already delivered to other parties cannot be recalled.

The Service is operated from the United States and directed to users in the United States. Your data may be transferred to and stored in the U.S. If you use the Service from outside the United States, you do so on your own initiative and consent to the processing and storage of your information in the United States. We do not represent that the Service complies with the privacy laws of any other country.

The Service is not intended for anyone under 18. We do not knowingly collect data from children. If we learn that we have collected personal information from someone under 18, we will delete it using commercially reasonable efforts once we become aware, except for copies already embedded in documents held by other parties, which we cannot recall.

We may update this Privacy Policy at any time. We may indicate changes by updating the “Last Updated” date above. For changes we consider material, we may also give notice by email, if we have your address, or by a notice in the Service or on the Site. Continued use of the Service after changes means you accept the updated policy. If you do not agree, stop using the Service and, if you have an account, you may request its deletion.

For privacy-related questions, contact support@sigfetch.com.