Privacy Policy

1. Information We Collect

We collect information that you provide directly, that is generated through your use of the platform, and that is received from third-party authentication services. The categories of information we collect are described below.

Google Account Data

When you sign in to SignSwifty using Google Single Sign-On (SSO), we receive and store the following information from your Google account:

• Your full name as set in your Google profile
• Your email address associated with your Google account
• Your Google profile picture URL

We use this information solely to create and manage your SignSwifty account. We do not request access to your Google Drive, contacts, or any other Google services beyond basic profile information.

Contract & Document Data

When you use SignSwifty to create, edit, or manage contracts, we store the content of those documents, including:

• Contract text, clauses, and formatting
• Document titles and metadata
• Signer information you add to contracts (names, email addresses, roles)
• The current status of each contract (draft, pending, signed, completed)

Electronic Signatures

When signers execute a contract through SignSwifty, we collect and store:

• Drawn signature images created by signers on the platform
• The association between each signature and the specific contract fields it was applied to

Audit Trail Data

To maintain the legal integrity of signed contracts, we automatically collect audit trail information for each signing event, including:

• IP addresses of signers at the time of signing
• Timestamps of all signing actions (viewed, signed, completed)
• A record of actions taken on each contract (creation, edits, sending, signing, completion)

Usage Data & Session Information

We collect limited technical information during your use of the platform:

• Session cookies to maintain your authenticated state
• General usage patterns to help us understand how the platform is used and identify areas for improvement

2. How We Use Your Information

We use the information we collect for the following purposes:

Account Creation & Authentication

Your Google account data is used to create your SignSwifty account, authenticate your sessions, and display your identity within the platform. Your email address serves as your primary identifier and is used if we need to communicate with you about your account or the service.

Providing the Contract Signing Service

Your contract data, document content, signer information, and electronic signatures are used to deliver the core functionality of SignSwifty — enabling you to create, send, sign, and manage legally binding contracts. This includes rendering documents, delivering signing requests to signers, and storing completed contracts for your records.

Maintaining Audit Trails for Legal Compliance

Audit trail data — including IP addresses, timestamps, and action logs — is collected and retained to establish a verifiable chain of evidence for each signed contract. This information supports the legal enforceability of electronically signed documents and is available to contract participants for compliance and dispute resolution purposes.

Service Improvement

We may use aggregated, non-identifying usage data to understand how the platform is used, diagnose technical issues, and improve the SignSwifty experience. We do not build advertising profiles or use your data for purposes unrelated to the operation and improvement of the service.

3. Data Storage & Security

We take the security and integrity of your data seriously. Here is how your information is stored and protected:

Infrastructure

SignSwifty is hosted on Cloudflare's global infrastructure. Your data — including account information, contracts, signatures, and audit trails — is stored using Cloudflare KV storage, which provides low-latency access and is distributed across Cloudflare's network of data centers.

Encryption in Transit

All data transmitted between your browser and SignSwifty is encrypted using HTTPS (TLS). This ensures that your personal information, contract content, and signatures are protected from interception during transmission.

Session Security

Authentication sessions are managed through secure session cookies. Sessions are time-limited and are invalidated upon sign-out.

No Sale of Personal Data

We do not sell, rent, or trade your personal data to third parties under any circumstances. Your information is used exclusively to provide and improve the SignSwifty service.

4. Third-Party Services

SignSwifty integrates with a limited number of third-party services that are essential to the operation of the platform. We do not share your data with any third parties for marketing or advertising purposes.

Google Identity Services

We use Google Identity Services to provide secure authentication via Google Sign-In. When you sign in, Google transmits your basic profile information (name, email, profile picture) to SignSwifty. Your interaction with Google's sign-in is governed by Google's Privacy Policy.

Cloudflare

SignSwifty is built on and hosted by Cloudflare. Cloudflare provides our hosting infrastructure, content delivery, DDoS protection, and data storage (Cloudflare KV). Cloudflare may process certain technical data (such as IP addresses) as part of providing these services. Cloudflare's handling of data is governed by Cloudflare's Privacy Policy.

Google Fonts

We use Google Fonts to serve typography on the platform. When you load SignSwifty, your browser may make requests to Google's font servers. Google may collect limited technical data (such as your IP address) as part of serving font files. This is governed by Google's Privacy Policy.

5. Data Retention

We retain your data only for as long as necessary to provide the service and fulfill the purposes described in this policy.

Account Data

Your account information (name, email, profile picture) is retained for as long as your SignSwifty account remains active. If you request deletion of your account, we will remove your account data within a reasonable timeframe.

Contract Data

Contracts and associated document data are retained until you choose to delete them. You may delete individual contracts from your account at any time. Upon account deletion, all contract data associated with your account will be removed, subject to the audit trail retention requirements described below.

Audit Trail Data

Audit trail records associated with signed contracts may be retained for an extended period even after contract or account deletion, as they serve as evidence of the signing event. This retention is necessary to maintain the legal enforceability and evidentiary value of signed contracts for all parties involved.

6. Your Rights

You have the following rights regarding your personal data held by SignSwifty. To exercise any of these rights, please contact us at support@signswifty.com.

• Access your data — You may request a copy of the personal data we hold about you, including your account information, contracts, and associated audit trail records.
• Request correction — If any personal information we hold about you is inaccurate or incomplete, you may request that we correct it. Account information synced from Google can be updated by updating your Google profile.
• Request deletion — You may request the deletion of your account and associated personal data. We will comply with deletion requests subject to any legal obligations to retain certain records (such as audit trails for signed contracts).
• Export your data — You may request a portable copy of your contracts and account data in a standard, machine-readable format.
• Withdraw consent — You may withdraw your consent to our processing of your personal data at any time by discontinuing use of the service and requesting account deletion. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all rights requests within 30 days. In some cases, we may need to verify your identity before processing your request.

7. Cookies

SignSwifty uses a minimal number of cookies, limited to what is strictly necessary for the operation of the platform.

Session Cookies

We use session cookies to maintain your authenticated state after you sign in with Google. These cookies are essential for the platform to function and allow you to navigate between pages without re-authenticating. Session cookies expire when you sign out or after a defined inactivity period.

No Third-Party Tracking Cookies

SignSwifty does not use any third-party tracking cookies, advertising cookies, or analytics cookies. We do not participate in any ad networks or cross-site tracking frameworks. Your activity on SignSwifty is not tracked for advertising purposes.

8. Children's Privacy

SignSwifty is a professional contract management and electronic signature platform. The service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal data from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal data, please contact us at support@signswifty.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will notify you by:

• Posting the updated policy on this page with a revised "Last updated" date
• Providing a prominent notice within the SignSwifty platform for significant changes

We encourage you to review this policy periodically. Your continued use of SignSwifty after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us:

We aim to respond to all inquiries within 30 days.

For information about the terms governing your use of SignSwifty, please refer to our Terms of Service.