Data Protection & Privacy

Privacy Policy

Last Updated: October 16, 2026 • Compliant with GDPR, CCPA & Global Privacy Standards

1. Introduction

At SignForce("signforce.co", "we", "us", or "our"), we respect your privacy and are committed to protecting the personal data of our users and their agreement recipients. This Privacy Policy describes how we collect, store, process, and safeguard your information when you use our platform.

2. Information We Collect

  • Account Information: When you register or sign in, we collect your name, email address, profile picture, and authentication ID provided by Google or email sign-in.
  • Documents & Signatures: PDFs, contract files, signature strokes, initials, dates, and text inputs uploaded or created through our editor.
  • Audit Trail Data: In compliance with ESIGN and eIDAS standards, we record timestamps, IP addresses, document IDs, recipient emails, and completion status to generate tamper-evident audit certificates.
  • Billing Information: Payment transactions are handled directly by our Merchant of Record, Paddle. SignForce never stores or has access to your full credit card numbers or banking passwords.

3. How We Use Your Information

We use your information strictly to:

  • Provide, maintain, and improve our digital signature workflows.
  • Facilitate signature requests, send email notifications to recipients, and generate completion certificates.
  • Authenticate your account and enforce tier-based subscription limits.
  • Prevent fraud, abuse, and security incidents.

4. Third-Party Service Providers & Subprocessors

We partner with trusted industry-leading infrastructure providers to operate SignForce securely:

  • Paddle.com: Our Merchant of Record handling billing, checkout, invoice generation, tax compliance, and payment processing.
  • Google Cloud / Firebase: Secure database storage, authentication, and encrypted cloud storage for documents.
  • Resend: Transactional email service used to dispatch signature invitation links, reminder emails, and completion notifications.

5. Data Retention & Security

We implement industry-standard encryption protocols (TLS/HTTPS in transit and AES-256 at rest) to safeguard all sensitive documents and signature data. Documents remain in your account until you choose to delete them. You can delete individual documents, templates, or request full account erasure at any time.

6. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the right to access, review, download, correct, or request the complete deletion of your personal data held by SignForce. You may exercise these rights by contacting us directly.

7. Contact Us

If you have any questions or concerns regarding our privacy practices, please contact our Data Protection team at:

SignForce Privacy Team

Email: [email protected]

General Inquiries: [email protected]