Privacy Policy

Signkoi is operated by [Company legal name], [Registered address] ("Signkoi", "we", "us"). For personal data about our account holders and website visitors, we are the controller.

For documents and recipient data that our customers upload and send for signature, the customer is the controller and we process that data on their behalf as a processor. Our Data Processing Agreement describes that relationship.

You can contact us about privacy at any time at [Contact email].

Account data: your name, email address, password (stored only as a one-way hash), profile photo if you add one, language, time zone, and, if you sign in with Google, your Google account identifier.

Content: the documents you upload, the fields you place on them, templates, contacts you save, and saved signatures.

Signing data: for each recipient, the name and email address the sender entered, an optional phone number or access code for identity checks, the signature or initials they add, field values, and timestamps of when the document was sent, opened, signed or declined.

Technical data: IP address, browser user agent and device information, recorded in the audit trail of each document and in our security logs.

Billing data: your plan and subscription status. Payments are handled by Paddle as merchant of record; we never see or store your full card details.

To provide the service you signed up for: creating your account, storing and sending documents, collecting signatures and producing signed PDFs and certificates of completion (performance of a contract).

To keep a tamper-evident audit trail that lets you and your recipients prove who signed what and when (performance of a contract and our legitimate interest in providing reliable evidence).

To protect accounts and the service: preventing fraud and abuse, rate limiting and investigating security incidents (legitimate interests).

To send service emails such as signing invitations, reminders, confirmations, email verification and data-export links (performance of a contract). We do not send marketing emails without your consent.

To meet legal obligations, for example tax and accounting records or responding to lawful requests from authorities (legal obligation).

We do not sell personal data and we do not use it for advertising.

We share data only with service providers who help us run Signkoi, such as our hosting provider, email delivery provider and Paddle for payments. They may use the data only to provide their services to us. The current list is in the sub-processor section of our Data Processing Agreement.

If you accept analytics, Microsoft processes usage data from our public website for us through Microsoft Clarity.

When you send a document, the recipients you add see the document, the other recipients' names where the signing order shows them, and the completed audit trail.

We may disclose data if the law requires it, to protect the rights and safety of our users, or as part of a merger or acquisition, in which case this policy will continue to apply.

Our providers may process data in countries other than your own. Where data protection law requires it, we rely on adequacy decisions or on Standard Contractual Clauses and additional safeguards to protect transferred data.

Account data is kept for as long as your account exists. Documents, their audit trails and signed copies are kept until you delete them or your account.

When you delete your account, we delete your documents, files and profile from our live systems straight away. Copies in backups are overwritten within our normal backup cycle. Data-export archives are deleted 24 hours after they are created.

We keep billing records for as long as tax and accounting laws require.

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, and to receive your data in a portable format.

You can do much of this yourself: edit your profile in Settings, download a complete copy of your data with "Request export", or delete your account in the danger zone of Settings.

For anything else, email [Contact email]. We will respond within the time required by law, usually within one month. You also have the right to complain to your local data protection authority.

If you signed a document someone sent you through Signkoi, the sender controls that document. Please contact them first; we will help them answer your request.

We protect data with encryption in transit (HTTPS), private file storage, hashed passwords and signing links, per-request access checks and a detailed audit trail. Finished PDFs are digitally sealed so that later changes can be detected. No system is perfectly secure, but we work to keep your data safe and will notify you and the authorities of a breach where the law requires.

Signkoi is not intended for children. You must be at least 16 years old, or the age of digital consent in your country if higher, to create an account.

We use the cookies and browser storage needed to run the service, such as keeping you signed in and remembering your language. With your consent, we also use Microsoft Clarity on our public website to understand how visitors use it. Clarity records interactions such as clicks and scrolling, masks what you type, and never runs inside the app or on signing pages. See our Cookie Policy for the full list.

We may update this policy as the service or the law changes. We will post the new version here with a new date and, for significant changes, tell account holders by email or in the app before the changes take effect.