Privacy Policy

1.Who this policy covers

Two kinds of people interact with Siglio, and we treat them differently.

Customers are the developers and businesses who hold Siglio accounts. For customer information, we decide how and why data is processed, and this policy describes it.

Signers and recipients are the people our customers send documents to. We process their information on the instructions of the customer who created the envelope. If you received a document for signature, the organization that sent it decided to contact you, and questions about why you received it or what the document contains belong to that organization. Section 6 covers what we process about you and the choices you have.

2.What we collect

From customers

• Account information: name, email address, company name and website, billing address, and the contact addresses you set for technical and billing notices.
• Payment information: handled by our payment processor. We store a reference to your payment method and billing history; we do not store full card numbers.
• Usage and API records: API request logs, request IDs, envelope metadata (status, delivery method, timestamps, signer count), usage and billing ledgers, webhook configuration and delivery history.
• Support communications: messages you send through the support form or by email, and our replies.
• Security signals: IP addresses, device and authentication data, and risk signals we use for fraud prevention and account protection.

From signers and recipients, on a customer's instructions

• Name, email address, and/or mobile phone number supplied by the customer for delivery.
• Signing events: delivery, views, signature, decline, and completion, with timestamps and technical data that form the audit trail of the transaction. That data includes IP address and, when the signing page is opened and again when the document is signed, device and browser characteristics such as browser type, screen size, timezone and graphics hardware, recorded to verify the signature and maintain the audit trail.
• SMS opt-out status, which we honor across the service.

From site visitors

• Standard web logs and, as described in Section 8, essential cookies and limited advertising-measurement signals on our marketing site.

3.How long we keep your documents

We keep the documents you send only as long as signing needs them. Signed documents, the original upload and any files signers upload are deleted automatically 30 days after the envelope is completed, voided or expires, and cannot be recovered after that. Download the signed PDF when it's ready and keep your own copy. We keep the signing record (who signed, when, contact details, IP address and device details, and certificate data) so the signature can be verified later. Envelopes nobody finishes expire 30 days after they are sent.

Documents are held in private storage that only our servers can read. Siglio is not an archive of your contracts: the copy you download is the one to keep.

Two things are stored because you ask us to: templates you save in the document studio (the PDF, so you can send it again), and files a signer uploads when you ask for them, such as a photo ID or proof of insurance. Signer files are kept with the envelope, are never sent by email, can be downloaded only by the account that sent the document, and are deleted with the envelope’s other files 30 days after it closes. You can ask us to delete a template or a signer file sooner through the contact form. Otherwise we avoid storing document contents except transiently where required to validate and process a file you submit.

4.How we use information

• To provide the service: creating and delivering envelopes, returning webhooks, operating the portal and the API.
• To bill: metering usage, generating invoices, processing payments, collections.
• To support you: answering questions, diagnosing problems using request IDs and logs.
• To protect the service: fraud prevention, abuse detection, risk monitoring, identity verification where risk warrants it, and enforcing our Terms and acceptable use rules.
• To communicate with you about your account: service notices, billing notices, security alerts, and onboarding messages about using the product. You can opt out of non-essential product emails; we don't send third-party promotions.
• To comply with law and to establish or defend legal claims.

5.Sharing

We never sell your personal information, and we never share it with third parties for their marketing purposes. We do not provide data to brokers, list vendors, or advertisers, and we do not display third-party advertising in the service.

We share information only in these situations:

• Service providers working on our behalf under contract, limited to what their function requires: payment processing, cloud hosting and infrastructure, the signing infrastructure that processes envelopes, and email and SMS delivery. The document studio also uses a text-analysis provider to suggest where signature and other fields go; for that we send only short snippets of text from an uploaded document (48 characters or fewer each, such as “Signature” or “Printed name”), never the document itself and never anything from your contacts. If a sender enables payments, the signer’s card details are collected by Stripe on Stripe’s pages and never pass through Siglio; Siglio stores the sender’s Stripe account identifier and the payment status of each document, not card data. They may use the data only to provide the service to us.
• Between you and your signers: delivering an envelope necessarily shares transaction information between the customer who sent it and the recipients who sign it.
• Legal requirements: where required by law, subpoena, or court order, or where necessary to protect the rights, safety, or property of Siglio, our customers, or the public. Where lawful and practical, we will notify the affected customer of a demand for their records.
• Business transfers: if Siglio is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy's commitments.

6.If you received a document to sign

A Siglio customer supplied your name and contact information to send you a document. We use that information to deliver the signing invitation, record the signing events that make the transaction auditable, and send you your signed copy, with a secure download link valid for 30 days after the envelope is completed. After that the document is deleted, so save your copy. If you have not signed yet, we send automatic reminders by text and email, the same way you were sent the document, until the document is signed or it expires 30 days after it was sent.

• To stop SMS messages, including reminders, reply STOP to any message. We honor opt-outs across the service.
• Questions about the document itself, why you received it, or the sender's records belong to the organization that sent it.
• To exercise privacy rights in information Siglio holds, use the contact form. Where the information belongs to a customer's transaction records, we may refer the request to that customer, as the law contemplates for processors acting on a business's instructions.

7.How long we keep it

We may retain records longer where required by law, to resolve disputes, or to enforce agreements, and we minimize diagnostic data containing unnecessary sensitive information as soon as practical.

8.Cookies and analytics

The portal uses essential cookies required for sign-in and security. Our marketing site may use analytics and advertising-measurement cookies to understand how visitors find us and whether our advertising works; these measure our own campaigns and are not used to build marketing lists or to share your information with third parties for their marketing. You can control cookies through your browser, and the service works with non-essential cookies disabled. We honor the Global Privacy Control signal where applicable law gives it effect.

9.Security

We use industry-standard safeguards appropriate to the data we hold: encryption in transit, access controls and least-privilege credentials, tenant isolation, audit logging, and monitoring. No service can promise perfect security, which is one more reason our design keeps your signed documents out of our systems. If a breach affecting your information occurs, we will notify you as required by applicable law.

10.Your rights and choices

Depending on your state, you may have rights to access, correct, delete, or receive a copy of personal information we hold about you. To exercise them, use the contact form; we will verify your identity against your account or the envelope records before acting, respond within the time applicable law allows, and will not discriminate against you for exercising your rights.

Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing to opt out of. Note that transaction records that make signatures auditable, and records we must keep by law (Section 7), may be exempt from deletion; where an exemption applies we will tell you.

11.Children

The service is for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

12.Where data is processed

Siglio operates from the United States and processes data in the United States. The service is directed to the United States market; if you use it from elsewhere, you do so on your own initiative and your information will be processed in the United States.

13.Changes and contact

We may update this policy, and material changes will be announced through the portal or your account email before they take effect, with the current version always at this page. Questions and privacy requests go through the contact form, or by mail to Siglio at the notice address listed in our Terms of Service.