Legal

Privacy Policy

Last updated: January 5, 2026

01

Information We Collect

We collect information you provide directly to us, including:

Account Information: Name, email address, password, and profile details when you create an account.

Document Data: Documents you upload, create, or receive through our platform, including signatures and annotations.

Communication Data: Messages, feedback, and support requests you send to us.

Payment Information: Billing address and payment method details (processed securely by our payment providers).

We automatically collect certain information when you use our services:

Usage Data: Pages viewed, features used, actions taken, and time spent on the platform.

Device Information: Browser type, operating system, device identifiers, and IP address.

Log Data: Access times, error logs, and referring URLs.

02

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our e-signature and document management services

Process transactions and send related information

Send technical notices, updates, security alerts, and administrative messages

Respond to your comments, questions, and customer service requests

Monitor and analyze trends, usage, and activities

Detect, investigate, and prevent fraudulent transactions and abuse

03

Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

With Your Consent: When you direct us to share information with third parties.

Service Providers: With vendors who perform services on our behalf.

Legal Requirements: When required by law or to protect rights, safety, and property.

Business Transfers: In connection with a merger, acquisition, or sale of assets.

04

Data Security

We implement industry-standard security measures to protect your information:

AES-256 Encryption

Documents encrypted at rest and in transit

SOC 2 Type II

Independently audited infrastructure

Regular Audits

Penetration testing and security reviews

Multi-Factor Auth

Optional MFA for all accounts

For more details, see our Security page.

05

Data Retention

We retain your information for as long as necessary to provide our services:

Account Data: Retained while active and 30 days after deletion.

Documents: Retained per your plan settings or until deleted.

Audit Logs: Retained for 7 years for compliance.

06

Your Rights

Depending on your location, you may have the following rights:

Access & Portability

Request a copy of your personal data in a portable format.

Correction

Request correction of inaccurate or incomplete data.

Deletion

Request deletion of your personal data.

Opt-Out

Opt out of marketing communications at any time.

To exercise these rights, contact us at privacy@sigil.dev.

07

Cookies & Tracking

We use cookies and similar technologies to:

Essential Cookies: Enable core functionality like authentication and security.

Analytics Cookies: Help us understand how you use our services.

Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings.

08

Contact Us

If you have questions about this Privacy Policy, please contact us:

Sigil Inc., 548 Market St, San Francisco, CA 94104

© 2026 Sigil. All rights reserved.