Privacy Policy

SignLink ("we", "us", or "our") is an electronic signature platform that lets users upload documents, place form fields, send documents for signature, and collect signed documents with an audit trail. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

This Policy applies to: (a) registered users who send documents for signature; (b) signers who are invited to sign documents through our platform; and (c) visitors to our website. It is published in accordance with the New Zealand Privacy Act 2020.

Account information: your name, email address, and password (stored as a hash). When you register, we may also detect and store your approximate country based on your IP address.

Document content: the documents you upload, the form fields you place, and the values entered by signers (including signature images, names, email addresses, dates, and typed text).

Signing metadata: when a document is signed, we record the signer's name and email, email verification status, timestamp, IP address, and browser user agent. This forms the audit trail.

Usage data: pages visited, actions taken, device type, and similar analytics that help us improve the Services.

We use your information to: provide the e-signature and document management Services; send transactional emails such as signing invitations, verification codes, and completion notifications; generate audit certificates; process payments and manage subscriptions; detect and prevent fraud or abuse; and comply with legal obligations.

We do not sell your personal information to third parties.

We use trusted third-party services to operate the platform:

Stripe — processes subscription payments. Stripe collects and processes your payment card information under its own privacy policy. We do not store full card details.

Resend — delivers our transactional emails (signing invitations, verification codes, completion notices). Resend processes the recipient email address and email content as necessary to deliver the message.

Google Ads — we use Google Ads conversion tracking to measure the effectiveness of our advertising. This may place a cookie on your device when you interact with our site. You can manage Google ad personalisation through your Google account settings.

These providers process personal information as our processors or independent controllers in accordance with their own privacy policies and applicable law.

We use essential cookies to maintain your authenticated session and remember your preferences. We also use analytics and advertising cookies (such as Google Ads conversion tracking) to understand how the Services are used and to measure marketing performance.

You can control or delete cookies through your browser settings. Disabling cookies may affect some features of the Services, such as staying logged in.

We retain your documents, signatures, and audit records for as long as your account is active and as needed to provide the Services. If you close your account, we will delete or de-identify your documents and personal information within a reasonable period, except where we are legally required to retain records or where retention is necessary to establish, exercise, or defend legal rights.

On the free tier, completed signed documents may be delivered by email and may not be stored permanently within the app. We encourage you to download and securely store important documents.

We use reasonable administrative, technical, and physical safeguards designed to protect your personal information, including encrypted data transmission (TLS) and access controls. However, no system is perfectly secure, and we cannot guarantee the absolute security of your data.

Under the New Zealand Privacy Act 2020, you have the right to access and correct your personal information, and to request its deletion in certain circumstances. You also have the right to know how your information is collected, used, and disclosed.

To exercise these rights, contact us through our Contact page. We will respond to your request within a reasonable time and may verify your identity before acting.

Your information may be stored and processed in countries other than New Zealand, including the United States, where our service providers (such as Stripe and Google) operate. By using the Services, you consent to these transfers, which are subject to appropriate safeguards as required by law.

The Services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or through the Services. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or your personal information, you can contact us through our Contact page.