SigSync

Privacy Policy

Effective date: July 4, 2026

This Privacy Policy explains how SigSync (“SigSync”, “we”, “us”) collects, uses, stores and protects information when you use sigsync’s websites, dashboard and APIs (together, the “Service”). By using the Service you agree to this policy.

1. Information we collect

  • Account data — your name, email address and password hash when you create an account, and your organization name and branding (logo, colors) when you configure a workspace.
  • Employee directory data — names, work email addresses, departments, job titles, phone numbers and photos that you import via CSV, enter manually, or sync from Google Workspace or Microsoft 365. You control this data; we process it solely to generate and deploy email signatures on your behalf.
  • Integration tokens — OAuth access and refresh tokens when you connect Google Workspace or Microsoft 365. Tokens are stored encrypted at rest, used only for the directory-sync and deployment features you trigger, and deleted when you disconnect the integration.
  • Usage data — product events (signatures created, templates used, imports run, deployments) tied to your workspace, plus standard server logs (IP address, browser user-agent) for security and rate limiting.
  • Billing data — payments are processed by Dodo Payments. We store your plan, subscription status and billing identifiers; we never see or store full card numbers.
  • Chat data — messages you send to Julie, our AI assistant, are processed by our AI infrastructure provider to generate replies and are not used to train models by us.

2. How we use information

  • To provide the Service: generating signatures, syncing directories, deploying to email platforms.
  • To operate analytics dashboards inside your own workspace.
  • To process subscriptions, enforce plan limits and prevent abuse.
  • To send transactional email (invites, receipts, security notices).
  • To improve the Service using aggregated, de-identified usage patterns.

We do not sell personal data. We do not use your employee directory for advertising.

3. Legal bases

We process data to perform our contract with you, to pursue legitimate interests (security, product improvement), to comply with law, and — for optional features like marketing email — with your consent, which you may withdraw at any time.

4. Sharing

We share data only with processors necessary to run the Service:

  • Cloud hosting and database providers (application and data hosting)
  • Dodo Payments (subscription billing)
  • Google and Microsoft, when you connect those integrations
  • AI inference providers, for the Julie assistant
  • Authorities, when required by valid legal process

5. Data retention

Workspace data is retained while your account is active. If you delete your organization, or your account, associated employee data, signatures, templates and events are deleted from production systems within 30 days, and from backups within 90 days. You may request earlier deletion at any time.

6. Security

All traffic is encrypted in transit (TLS). Data is encrypted at rest by our hosting providers. Access to production systems is restricted and logged. Webhooks are signature-verified. Passwords are hashed with modern algorithms — we can never read them.

7. Your rights

Depending on your jurisdiction (including under GDPR and similar laws), you may request access, correction, export or deletion of your personal data, object to processing, or lodge a complaint with a supervisory authority. Workspace owners can export employee data (CSV) and delete records directly in the dashboard. For anything else, email support@sigsync.app — we respond within 30 days.

8. International transfers

Our infrastructure providers may process data in the United States and the European Union. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.

9. Children

The Service is for business use and not directed to anyone under 16.

10. Changes

We will post any changes to this policy on this page and update the effective date. Material changes will be announced by email to workspace owners.

Contact

SigSync · support@sigsync.app