Privacy Policy

This Privacy Policy explains how signready.co ("signready.co", "we", "us") collects, uses, and shares personal data when you use signready.co and our related services (the "Service").

If you have questions, email us at privacy@signready.co.

Who is the controller?

The controller of your personal data is signready.co. You can reach us at privacy@signready.co.

Data we collect

• Account data: name, email address, and profile image (via Google sign-in).
• Document data: documents you upload, signatures, audit trail events, and metadata you provide.
• Payment data: payment identifiers and status from Stripe (we do not store full card details).
• Technical data: IP address, user agent, and logs needed to secure and operate the Service.
• Support data: messages you send to us.

How we use your data (and legal bases)

• Provide the Service (contract): create accounts, store documents, route signature requests, and deliver completed files.
• Process payments (contract/legal obligation): take payments and keep records for accounting.
• Security and fraud prevention (legitimate interests): protect the Service and users.
• Analytics (optional) (consent): understand usage patterns to improve the product.
• Support and communications (legitimate interests / contract): respond to requests.

Sharing and processors

We use trusted processors to run the Service:

• Supabase (database and file storage)
• Vercel (hosting and analytics)
• Stripe (payments)
• Resend (transactional email)
• Google (OAuth authentication)

We share data only as needed to provide the Service, comply with the law, or protect our rights.

International transfers

Some processors may process data outside the EEA. Where required, we rely on appropriate transfer safeguards such as Standard Contractual Clauses or adequacy decisions.

Retention

We keep account and document data for as long as your account is active. You can delete your account at any time from your dashboard. We keep payment records as required by law.

Your rights (EEA/UK)

You may request access, correction, deletion, restriction, or portability of your data, and you can object to certain processing. You can withdraw consent at any time.

Use the “Request my data” and “Delete account” options in your dashboard, or email privacy@signready.co.

You also have the right to lodge a complaint with your local data protection authority.

Security

We use technical and organizational measures to protect your data, including access controls, encryption in transit, and audit logging.

Changes

We may update this policy from time to time. We will post the updated version on this page.