Privacy Policy

1. Who we are

Signavow is a trading name of Signavow Ltd, registered in England and Wales (Company No. 15209483), with registered address at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

For data protection enquiries, contact our Data Protection Officer at dpo@signavow.com.

2. What data we collect

We collect the following categories of personal data:

• Account information: name, email address, company name (for operators creating signing campaigns).
• Signing data: name, email address, IP address, browser user agent, timestamps of viewing, consenting, and signing actions.
• Documents: PDF documents uploaded for signing and the resulting signed copies.
• Signature images: drawn or typed signature representations.
• Usage data: pages visited, features used, error logs.

3. Why we collect it

We process personal data for the following purposes:

• Contract performance: to provide the document signing service, deliver emails, and produce signed documents.
• Legal obligation: to maintain audit trails that evidence the validity of electronic signatures under the Electronic Communications Act 2000, eIDAS Regulation, and the ESIGN Act.
• Legitimate interest: to improve our service, prevent fraud, and respond to support requests.

4. Audit trail

For every document signing, we record an audit trail that includes: the signer's IP address, browser user agent, timestamps of when the document was viewed, when consent was given, and when the signature was applied. This data is retained for the lifetime of the signed document to ensure the legal validity of the signature.

5. Data retention

Signed documents and their associated audit trails are retained for 730 days from the date of signing, unless a longer retention period is required by law or requested by the document sender. Unsigned documents are deleted 90 days after the last activity on the signing request.

6. Data sharing

We do not sell personal data. We share data with the following categories of processors:

• Cloud infrastructure: Amazon Web Services (EU/UK regions) for hosting, storage, and database services.
• Email delivery: Mailgun for sending transactional emails (signing requests, confirmations).
• CDN: Cloudflare for content delivery and DDoS protection.

7. Your rights

Under the UK GDPR and EU GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (subject to legal retention requirements)
• Restrict processing
• Data portability
• Object to processing

To exercise any of these rights, contact us at dpo@signavow.com.

8. Cookies

For details on our use of cookies, please see our Cookie Policy.

9. Contact

If you have any questions about this policy, contact us at:

Signavow Ltd (trading as Signavow)
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
dpo@signavow.com