Privacy Policy

We collect:

• Account details you provide — name, email address, phone number, and country.
• Documents & signing data — the files you upload, field placements, signatures, and recipient details you enter.
• Audit & technical data — signing events, timestamps, IP addresses, and basic device/ browser information, kept to secure the Service and evidence the signing process.

We use your information to operate the Service: creating and securing your account, delivering documents to signers, generating signed PDFs and audit trails, sending transactional notifications, and maintaining reliability and security. We do not sell your personal data, and we do not use your documents for advertising.

We process personal data to perform our contract with you (providing the Service), on the basis of your consent where you provide it, and for our legitimate interests in securing and improving the Service. You may withdraw consent at any time, though this may limit your ability to use the Service.

When you use an AI feature (suggesting signature fields, or — for recipients — analysing or answering questions about a document), the relevant document content is sent to our AI provider, Anthropic, to generate the result. Anthropic processes this data as a service provider and does not use data submitted through its API to train its models. AI features run only when you choose to use them.

Your data is encrypted in transit and at rest. We apply access controls and database row-level security so documents and account data are only accessible to you and the recipients you authorise. No system is perfectly secure, but we take reasonable measures to protect your information.

Our infrastructure and service providers currently store and process data in the United States. By using SignSign you consent to the transfer and processing of your data outside your country of residence, including in the United States, subject to appropriate safeguards. We take reasonable steps to ensure your data is protected to a standard comparable to that required under the PDPA.

We keep your data for as long as your account is active or as needed to provide the Service. You can delete documents, and you can request deletion of your account and associated personal data. We may retain limited records (such as completed-document audit trails) where needed to evidence a signed agreement or to comply with legal obligations.

We use essential cookies to keep you signed in and to secure the Service. We do not use advertising cookies. You can control cookies through your browser settings, though disabling essential cookies may break core functionality.

We rely on trusted service providers to deliver SignSign. Each processes only the data needed for its role:

• Supabase— database, authentication, and encrypted file storage.
• Vercel— application hosting and delivery.
• Cloudflare— DNS, network security, and bot/spam protection on our forms.
• Resend— transactional email delivery (signing invitations and notifications).
• Anthropic— AI features (field suggestions and document analysis); does not train on API data.
• Stripe— payment processing, only if and when optional paid features are introduced.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, to withdraw consent, and to object to or restrict certain processing. To exercise these rights, contact us using the details below and we will respond within a reasonable time.

SignSign is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be communicated through the Service or by email, and the “last updated” date above will change.

Questions about your privacy, or want to exercise your rights? Reach us at fred@claudecode.sg.