Privacy Policy

1. Introduction

Signew ("we", "us", or "our") operates the signew.io platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address and optional full name when you create an account.
• Signing Information: Signer name, optional email address, digital signature image, and browser metadata (user agent) when a waiver is signed.
• Documents: PDF waiver templates uploaded by professionals and signed documents generated through the platform.
• Personal Tier Profile: If you use the Personal (fill & sign) tier, we additionally collect your messaging-app identifier (e.g. your Telegram user ID and display name), the fill values you choose to save to your profile (such as full name, ID number, address, phone, and email), and - only with your explicit consent - a saved image of your signature.
• Personal Tier Documents: Documents you send to Signew for filling and signing (as received and as signed), the detected fields and filled values, and a processing history (received, previewed, confirmed, signed) that serves as your signing audit trail.
• Usage Data: Pages visited, actions taken, and timestamps for the purpose of providing the service.

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process document signing and verification
• To detect fields in documents you send us and fill them from your saved profile (Personal tier) - your profile values are used only for filling documents you send, and your saved signature is applied only to documents you individually confirm
• To send transactional emails (signing confirmations, verification shares, account notifications)
• To authenticate users and protect account security
• To comply with legal obligations

4. Document Storage

Uploaded templates are stored in private storage accessible only to the account owner. Signed documents are stored securely and can be accessed via unique verification links. Personal-tier documents are stored in private storage tied to your profile and are accessible only to you (and to anyone you give a share link to). We do not access, read, or analyze the content of your documents except as required to provide the signing and verification service.

5. Saved Signatures and Profiles (Personal Tier)

Your saved signature and profile are the most sensitive data we hold, and they get specific treatment:

• Consent first: Your signature is stored only after you explicitly agree to save it, and we record when that consent was given.
• Purpose-limited: Profile values are used only to fill documents you send us; your signature is applied only to documents you individually confirm. Neither is used for anything else, shared with other users, or sold.
• Stored privately: Signature images and documents live in private storage buckets with no public access, encrypted in transit and at rest by our storage provider. Client applications have no direct access to personal-tier data.
• Delete anytime: You can delete your saved signature ("/delete_signature" in the chat) or your entire personal profile with all its documents ("/forget") at any moment. Deletion is immediate and complete: the signature image, your profile details, and the original and signed document files are erased from our storage, not just unlinked. Share links to deleted documents stop working.

6. Data Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third-party services that help us operate the platform (hosting, email delivery, authentication). These include Supabase (database, storage, and auth), Cloudflare (hosting), and Resend (email delivery).
• AI Processing (Personal tier): Documents you send for filling are processed by Anthropic's Claude API to detect fields and, for photographed forms, to read the form's text. Under Anthropic's commercial API terms, this data is not used to train their models. Your saved profile values and signature are applied by Signew, not by the AI provider.
• Messaging Platforms (Personal tier): Documents and messages you exchange with Signew through a messaging app (e.g. Telegram) also pass through that platform's servers under its own privacy policy.
• Verification Recipients: When a professional shares a verification link, the recipient can view the signed document, signer name, and signing timestamp. When you create a share link for a document you signed on the Personal tier, anyone with that link can download the signed document - share it only with the intended recipient.
• Legal Requirements: When required by law, court order, or governmental request.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), row-level security on database tables, and secure token-based authentication. We maintain our databases and handle personal data in accordance with the Israeli Privacy Protection Law and its regulations. However, no method of electronic transmission or storage is 100% secure.

8. Data Retention

We retain your account data and documents for as long as your account is active or as needed to provide the Service. Signed documents are retained to support ongoing verification. Personal-tier profiles, signatures, and documents are retained until you delete them (see Section 5) or your account is deleted; deletion erases the stored files as well as the records. You may request deletion of your account and associated data by contacting us.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

Personal-tier users can delete their saved signature ("/delete_signature") or their whole profile and documents ("/forget") directly in the chat without contacting us. To exercise these rights, contact us at support@signew.io.

10. Cookies

We use essential cookies and local storage for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

11. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top indicates the most recent revision.

13. Contact Us

If you have questions about this Privacy Policy, contact us at support@signew.io.