SignIQ Privacy Policy

This Privacy Policy describes how [Sign IQ legal entity] ("Sign IQ," "Provider," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites, online properties, marketing activities, and the Sign IQ electronic signature and document workflow platform (collectively, the "Services").

This Privacy Policy is intended to describe our practices as a business/controller for personal information we collect directly from website visitors, prospective customers, business contacts, account administrators, Authorized Users, Signers, and other individuals who interact with us. Where we process Customer Content or personal information on behalf of a customer under a written agreement, we generally act as a processor/service provider and process such information in accordance with the applicable customer agreement and Data Processing Addendum.

If you use the Services as an Authorized User or Signer in connection with a customer account, the customer may be responsible for providing additional privacy notices and for responding to certain privacy requests relating to Customer Content and transaction records.

1. Personal Information We Collect

The personal information we collect depends on how you interact with us and the Services. We may collect the following categories of personal information:

2. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, complete forms, request information, sign or receive documents, contact support, register for events, or communicate with us.

• From customers and Authorized Users, including when they invite Signers, configure workflows, upload documents, or administer accounts.

• Automatically from your device and browser through cookies, pixels, log files, SDKs, and similar technologies.

• From third-party services and integrations that customers connect to the Services, such as identity providers, cloud storage providers, CRM systems, payment processors, email providers, and business applications.

• From business partners, service providers, resellers, marketing providers, event sponsors, public databases, professional networks, and other commercially available sources.

• From security, fraud prevention, and compliance vendors that help us protect the Services and verify account or transaction activity.

3. How We Use Personal Information

We use personal information for the following purposes:

• To provide, operate, maintain, host, support, troubleshoot, and improve the Services.

• To create and administer accounts, authenticate users, manage roles and permissions, process transactions, generate audit trails, and deliver completion certificates or related records.

• To process documents, templates, signature requests, routing information, notifications, and other Customer Content as instructed by customers or users.

• To communicate with you about the Services, support requests, account activity, security matters, product updates, transactions, and administrative notices.

• To process payments, invoices, renewals, subscriptions, taxes, and related financial records.

• To personalize user experience, remember preferences, measure engagement, and understand how the Services are used.

• To conduct analytics, develop new features, improve performance, test functionality, and enhance security and reliability.

• To send marketing communications, newsletters, event invitations, surveys, and promotional materials, subject to applicable law and your choices.

• To detect, investigate, prevent, and respond to fraud, abuse, security incidents, spam, phishing, malware, policy violations, unauthorized access, and other harmful or unlawful activity.

• To comply with legal, regulatory, tax, accounting, export control, sanctions, law enforcement, and contractual obligations.

• To protect the rights, property, safety, and interests of Sign IQ, our customers, users, Signers, and others.

• To evaluate or conduct a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

4. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

• Customers and account administrators. If you use the Services through a customer account, we may disclose account, transaction, usage, support, and audit information to that customer and its authorized administrators.

• Authorized Users and Signers. We disclose information as necessary to route documents, send notifications, authenticate participants, collect signatures, generate audit trails, and complete transactions.

• Service providers and processors. We disclose information to vendors that provide hosting, storage, security, analytics, payment processing, communications, customer support, professional services, marketing, and other services on our behalf.

• Third-party integrations. If a customer or user connects the Services with a third-party application, we may disclose information to that integration as directed by the customer or user.

• Professional advisors. We may disclose information to attorneys, auditors, insurers, accountants, banks, and other professional advisors.

• Legal and compliance recipients. We may disclose information to courts, regulators, law enforcement, governmental authorities, and other parties where we believe disclosure is required or appropriate to comply with law or protect rights and safety.

• Corporate transaction parties. We may disclose information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.

• With consent or direction. We may disclose information with your consent or at your direction.

We do not sell Customer Content. We do not use Customer Content for cross-context behavioral advertising. We may disclose limited website or marketing identifiers to analytics and advertising partners as described below, which may be considered a "sale," "sharing," or targeted advertising under some state privacy laws depending on the circumstances.

5. Cookies, Analytics, and Advertising Technologies

We and our service providers may use cookies, pixels, tags, local storage, web beacons, and similar technologies to operate our websites and Services, remember preferences, measure performance, understand usage, secure the Services, and support marketing activities.

These technologies may collect information such as IP address, device identifiers, browser type, pages viewed, referring URLs, time spent on pages, and interactions with emails or advertisements. You may be able to manage cookies through your browser settings, device settings, cookie banner, or other choices we make available. Blocking cookies may affect website or Service functionality.

Where required by applicable law, we will honor legally recognized opt-out preference signals, such as Global Privacy Control, for the browser or device through which the signal is sent.

6. Retention of Personal Information

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, complete transactions, comply with legal and contractual obligations, resolve disputes, enforce agreements, prevent fraud and abuse, maintain security, and operate our business.

Retention periods may vary based on the type of information, the nature of the account or transaction, customer configuration, legal requirements, backup and archival practices, and the instructions of the applicable customer. Customer Content and transaction records are retained and deleted in accordance with the applicable customer agreement, account settings, Order Form, DPA, and documentation.

7. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These safeguards may include access controls, authentication, encryption, logging, monitoring, vulnerability management, incident response, vendor oversight, and employee training.

No system can be guaranteed to be completely secure. Customers and users are responsible for using strong credentials, safeguarding account access, configuring appropriate permissions, and promptly notifying us of suspected unauthorized access or misuse.

8. Your Privacy Choices and Rights

Depending on where you live and how you interact with us, you may have rights to request access to, correction of, deletion of, or portability of personal information; to opt out of certain processing such as sale, sharing, targeted advertising, or certain profiling; to limit certain uses or disclosures of sensitive personal information; to withdraw consent where processing is based on consent; and to appeal certain privacy request decisions.

To exercise rights, contact us using the information in the "Contact Us" section. We may need to verify your identity and request information sufficient to locate your records. If your request relates to Customer Content or a transaction controlled by one of our customers, we may direct you to that customer or process your request in accordance with the customer’s instructions.

You may authorize an agent to submit a request on your behalf where permitted by law. We may request proof of authorization and may require you to verify your identity directly with us. We will not discriminate against you for exercising privacy rights, although some features may be unavailable if we cannot process information necessary to provide them.

9. California Privacy Notice

This section applies to California residents and supplements the rest of this Privacy Policy. It is intended to provide disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act and its implementing regulations (collectively, "CCPA").

Categories Collected, Sources, Purposes, and Disclosures

In the preceding twelve (12) months, we may have collected the categories of personal information described in Section 1 above from the sources described in Section 2, used them for the purposes described in Section 3, and disclosed them to the categories of recipients described in Section 4.

Sale, Sharing, and Targeted Advertising

We do not sell Customer Content. We do not knowingly sell or share personal information of consumers under 16 years of age. We may use analytics, advertising, or marketing technologies on our websites that involve disclosure of identifiers, internet or network activity, and inferences to advertising or analytics partners. Depending on the circumstances, this may be considered a "sale" or "sharing" under the CCPA. California residents may opt out by using the "Do Not Sell or Share My Personal Information" link or other mechanism we make available, or by enabling a recognized opt-out preference signal such as Global Privacy Control.

Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that require a right to limit under the CCPA, except to the extent necessary to provide the Services, detect security incidents, prevent fraud, ensure safety, comply with law, or as otherwise permitted by the CCPA.

California Rights

California residents may have the right to know/access, delete, correct, obtain portability, opt out of sale or sharing, limit certain uses or disclosures of sensitive personal information, and not be discriminated against for exercising CCPA rights. To submit a request, contact us as described in the "Contact Us" section or use the privacy rights mechanisms we make available.

10. Additional U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable comprehensive state privacy laws, including laws in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states that may adopt similar laws. These rights and our obligations vary by state and may be subject to limitations and exceptions.

Depending on your state and the nature of your interaction with us, you may have rights to:

• Confirm whether we process your personal information and access such information.

• Correct inaccuracies in your personal information.

• Delete personal information provided by or obtained about you.

• Obtain a portable copy of personal information you provided to us.

• Opt out of sale of personal information, targeted advertising, or certain profiling decisions that produce legal or similarly significant effects.

• Revoke consent where processing is based on consent.

• Appeal a decision we make regarding a privacy request.

To appeal a privacy request decision, reply to our decision notice or contact us using the information below and state that you are appealing. We will respond within the time required by applicable law. If your appeal is denied, you may have the right to contact your state attorney general or other applicable regulator.

11. Notice for Individuals Outside the United States

If you access the Services from outside the United States, your personal information may be processed in the United States and other jurisdictions where we, our affiliates, service providers, or subprocessors operate. These jurisdictions may have data protection laws that differ from those in your location.

Where required, we use appropriate safeguards for cross-border transfers, such as contractual commitments, data processing agreements, and other transfer mechanisms recognized by applicable law. Additional international transfer terms may be addressed in the DPA for customer-controlled personal data.

12. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through our websites or marketing activities. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete it as required by law.

Customers are responsible for determining whether their use of the Services involves minors, obtaining any required consents, and configuring workflows in compliance with applicable laws governing minors’ data and electronic signatures.

13. Customer-Controlled Data and Processor Activities

When we process Customer Content and related personal information on behalf of a customer, the customer generally determines the purposes and means of processing. In that context, we process the information as a processor/service provider in accordance with the customer agreement, DPA, and customer instructions.

Privacy requests relating to Customer Content, signature transactions, or records controlled by a customer should generally be directed to that customer. If we receive a request relating to customer-controlled data, we may refer the requester to the customer or assist the customer in responding, as required by the DPA and applicable law.

14. Marketing Communications

You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us. Even if you opt out of marketing communications, we may still send transactional, administrative, legal, and security-related communications.

15. Third-Party Websites and Services

The Services may contain links to third-party websites, applications, integrations, or services. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. Customers and users should review the privacy notices of third-party services before using them.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated Privacy Policy, updating the effective date, or using other reasonable means. Your continued use of the Services after the effective date of an updated Privacy Policy means that the updated Privacy Policy applies to your subsequent use of the Services.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise privacy rights, contact us at:

• Mail: 64 Beaver St. New York, NY, 10004

If you use the Services through a customer account, you may also contact the applicable customer for privacy requests relating to Customer Content or transaction records.