Privacy notice

1. Who handles personal data?

The operator identified on this page is the controller for account administration and quote requests. For customer-uploaded documents, the customer determines the processing purposes; the provider’s processing duties are governed by the agreement with that customer.

2. Singapore operator and international customers

The provider is a Singapore business. Personal data is subject to Singapore’s Personal Data Protection Act and other laws applicable to the processing concerned. The EU General Data Protection Regulation applies to processing within its scope. Customers remain responsible for their own controller obligations when using the service.

3. Data and sources

The system may store supplied names, email addresses, organizations, account settings, password hashes, contacts, quote requests, PDFs, recipient details, completed fields, signature images, dates and record history. Documents and recipient details may be supplied by the sender. Hosting providers may also process technical traffic data when the browser connects to the service.

• Account data: name, email address, organization, account settings and password hash.
• Document data: uploaded PDFs, recipients, completed fields and signature images.
• Evidence data: timestamps, action history, document checksums and signing event identifiers.
• Communications: quote requests and information voluntarily supplied in an enquiry.

4. Purpose and legal basis

Processing supports requested accounts and document workflows, quote enquiries, security and evidence of actions. Depending on applicable law and purpose, it relies on contract performance, a pre-contractual request, legal duties, legitimate security interests or consent where required. Registration is not blanket consent to marketing.

5. Recipients and service providers

Documents are accessible to authorized participants and administrators. The application runs on a Hostinger VPS and email uses Namecheap hosting. Some PDF and date-picker functions load resources from cdnjs.cloudflare.com and cdn.jsdelivr.net; the browser connects to those providers when doing so.

6. Retention and deletion

Retention follows the processing purpose, customer agreement and applicable legal or business retention grounds. Deletion in the interface does not always mean immediate physical erasure: evidence records and backups may have different lifecycles. Trial expiry alone does not delete documents. Direct erasure or export requests to the provider or, for customer documents, their controller.

7. Rights and requests

Subject to applicable law, individuals may request information, access, correction, erasure, restriction or portability, or object to processing. Consent may be withdrawn where processing relies on it. Requests concerning customer documents may also be directed to the sender as controller. Individuals may contact Singapore’s Personal Data Protection Commission or the competent EU data protection supervisory authority.

8. Security and transfers

Access is restricted by account permissions and individual recipient tokens; the website uses HTTPS. PDF stamps and hash chains do not encrypt stored data. Hosting, email and external resources may involve international processing. The service does not promise data storage exclusively within one country.

9. Cookies and your choices

The separate cookie and technology notice explains sessions and language preferences. Permissions to send and receive email notifications follow account and document workflow settings. A service notification is not marketing consent.

You can restrict cookies in your browser, but this may prevent sign-in and some functions from working. Supply only the data needed for the document workflow.

10. Changes to this notice

When this notice changes, we update the version date shown on the page. Material changes to processing require the information and, where necessary, consent required by applicable law. Publishing this notice does not itself provide consent for a new processing purpose.