Last updated: October 18, 2026
We collect information you provide directly to us when you create an account, including your name, email address, and company name. We also collect information about the contracts you generate, including form data and generated content.
We use your information to provide and improve our services, communicate with you about your account, process payments, and send transactional emails. We do not sell your personal information to third parties.
We use the following third-party services to process and store your data:
Each processor is bound by data processing agreements that comply with applicable privacy laws. Your data is only shared with these providers to the extent necessary to provide our services.
Your data is stored securely using Supabase (PostgreSQL) with row-level security policies. All data is encrypted in transit using TLS/SSL. Passwords are hashed using industry-standard algorithms. We do not store payment card details — all payment processing is handled by Stripe.
When you generate a contract, your form inputs are sent to our AI provider (OpenAI or Anthropic) for processing. We use API-level data processing and do not allow our AI providers to train on your data. Your generated contracts are stored in your account and are not shared with other users.
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics, if enabled, are privacy-focused and do not track individual users.
You have the right to access, correct, or delete your personal data. You can delete your account at any time from your account settings, which will permanently remove all your data. You may also request a data export by contacting us.
GDPR (EU/EEA residents):
You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. You may lodge a complaint with your local data protection authority. Our legal basis for processing is your consent and our legitimate interest in providing the service.
CCPA (California residents):
You have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].
We retain your data for as long as your account is active. When you delete your account, all associated data (contracts, signatures, form data) is permanently deleted within 30 days.
In the event of a data breach that poses a risk to your rights or freedoms, we will notify affected users within 72 hours of becoming aware of the breach, in accordance with GDPR Article 34. Notifications will be sent via email and may include details of the breach, measures taken, and steps you can take to protect yourself.
SignetX is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately and we will delete it.
Your data may be processed and stored in countries other than your own, including the United States, as our third-party processors (Supabase, OpenAI, Anthropic, Stripe, Resend) operate global infrastructure. By using SignetX, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.
We may update this Privacy Policy from time to time. We will notify users of significant changes via email at least 30 days before they take effect. Continued use of SignetX after changes constitutes acceptance of the updated Privacy Policy.
If you have questions about this Privacy Policy, please contact us at [email protected].