Privacy Policy

This Privacy Policy explains how Sign10X (“Sign10X,” “we,” “us,” or “our”) handles personal information when you visit our website, create or use an account, contact us, use our API, or receive or sign a document.

For documents and recipient information submitted by a customer, that customer generally decides why and how the information is used. Sign10X processes it to provide the service. Questions about a document’s contents should first be directed to its sender.

• Account and workspace data: name, email, authentication information, profile details, organization membership, role, preferences and policy acceptance.
• Document and signing data: uploaded files, templates, fields, recipient names and emails, signatures, initials, entered values, signing status and related messages.
• Transaction data: plan, billing interval, subscription status, payment-provider customer references and limited payment metadata. Sign10X does not store full card numbers.
• API and technical data: API key identifiers and hashes, scopes, request paths, timestamps, response status, usage, device/browser information and IP address where recorded.
• Communications: contact-form information and support or sales correspondence.
• Audit data: document and account events, signer identity details, timestamps, IP addresses and other evidence needed to operate and protect the signing workflow.

• Provide accounts, document storage, templates, signature requests, signing, downloads, APIs and support.
• Authenticate users, isolate workspaces, enforce permissions, process subscriptions and provide requested communications.
• Create and preserve audit records, investigate errors, prevent abuse and protect the service.
• Comply with law, enforce agreements and establish or defend legal claims.
• Improve reliability and usability using operational information. We do not currently use advertising pixels or product-analytics trackers.

We disclose information to the people and organizations involved in a document workflow, workspace administrators, and vendors that help provide hosting, authentication, storage, email and payment processing. Current key providers include Lovable Cloud, Stripe and the configured email-delivery provider.

We may also disclose information in a business transfer, with your direction or consent, to protect rights and safety, or when reasonably required by law. We do not sell personal information or share it for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws.

We use administrative, technical and organizational safeguards designed to protect information, including access controls, organization separation, private document storage and encrypted network transport. No method is perfectly secure. Our providers may process information in the United States and other locations where they operate, subject to their contractual and legal obligations.

We retain information for as long as needed to provide the service, maintain signing and security records, satisfy legal and accounting duties, resolve disputes and enforce agreements. Retention varies by data type, workspace instructions, subscription status and legal need. Deleted information may remain temporarily in backups. Contact messages are retained only as reasonably needed to answer and administer the request.

You may update certain account information in the service and request access, correction or deletion by emailing [email protected]. We may verify your identity and may retain information when permitted or required by law. If Sign10X processes your data for a customer, we may direct your request to that customer.

Depending on your state and whether applicable legal thresholds are met, you may have rights to know, access, correct, delete or obtain a copy of personal information, and to appeal a denied request. Sign10X does not currently sell personal information or use it for targeted advertising, so there is no corresponding opt-out mechanism. Authorized agents may submit requests where state law permits. We will not unlawfully discriminate against you for exercising a privacy right.

Cookies and similar browser storage are small files a site saves on your device. We group them into four categories. Necessary cookies keep you signed in and support security, session management, fraud prevention, storage of your cookie choice and core functionality; they cannot be switched off. Preferences cookies remember interface settings. Analytics cookies measure traffic, page usage and performance. Marketing cookies support advertising, retargeting and campaign attribution. Optional categories load only after you consent, and no analytics or advertising provider is configured today; if we add one, this policy and the cookie banner will name it before it loads.

You can change your choices at any time using the “Cookie settings” link in the site footer. We store your choice, the categories you selected, the consent version and the time of your choice for up to 180 days, after which we ask again. We also ask again when the cookie policy materially changes. See our Cookie Policy for the current inventory.

The service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Contact us if you believe a child provided information to us.

We may update this policy. We will change the date above and provide additional notice when required. Continued use after an effective update is subject to applicable law.