Legal
Privacy policy
Last updated 22 October 2026 · Draft for review by counsel
1. What we collect
Account details (name, e-mail, phone if you add it), billing details handled by our payment provider, usage and security logs (sign-ins, devices, IP addresses), and the content you store. Vault content is encrypted on your device and unreadable to us.
2. Why
To run the service, secure your account, send transactional e-mail (verification, signature requests, reminders, receipts), bill you, and improve the product using first-party, privacy-friendly analytics.
3. Signers and card viewers
When someone signs a document, we record their name, e-mail, time, IP address and authentication method in the audit certificate, on behalf of the sender. When someone views a card page, we count the view without third-party trackers; details are only collected if they choose to share them.
5. Retention
Account data for as long as your account exists plus a short period for backups; audit certificates for as long as the signed document exists; security logs for up to 12 months.
6. Your rights
Access, correction, export, deletion and objection, in line with the UAE Personal Data Protection Law and, where it applies, the GDPR. Write to [email protected].
8. Where data is stored
In the region where the service is hosted. We will state a specific region only once production actually runs there.
9. Changes
We will tell you about material changes by e-mail or in the app before they take effect.