Privacy

What we collect

For an account: your email address and a password (stored only as a salted hash — we never see it). For a ceremony: the document you upload, the signers' names and email addresses you enter, and a record of what happened during signing — when each signer opened the document, what they affirmed, and when they signed.

For signing sessions we also record coarse technical details — an IP address and a browser identifier — because they are genuine evidence of session continuity. We claim nothing more for them than that.

What we do with it

We use it to run the service: to render and seal documents, to reach signers, and to build the evidence record that is the whole point. We do not sell your data, we do not use it to advertise to you, and we do not use the contents of your documents for anything other than signing them and keeping the evidence.

Cookies

Signatas sets the cookies this service needs in order to work: the one that keeps you signed in, and the ones that remember your language and theme. None of these can be declined without declining the service itself, so we do not ask you to accept them.

Separately, we would like to count visits anonymously through Vercel Analytics, which sets no cookie of its own. That choice is genuinely optional: nothing loads until you answer the notice shown on your first visit, and you can change your mind at any time by clearing this site's local storage in your browser.

Where it lives, and who can see it

Your data is isolated per account at the database level, so one customer's documents and evidence are never visible to another. Our own staff do not have routine access to the contents of your documents; administrative access is limited and recorded.

Erasure

You can ask us to delete your account and everything in it, and we will erase it — not hide it. A signer can ask for their personal data to be removed from a ceremony. Contact us at hello@signatas.com.