Signet Docs is operated by Signet Docs Ltd (company number SC895904), a company registered in Scotland. When we use the words "Signet", "we", "us" or "our" in this policy, we mean Signet Docs Ltd acting as the data controller for personal data collected through our website and platform at signetdocs.ai, including app-uk.signetdocs.ai (UK region) and app-eu.signetdocs.ai (EU region).
Questions about our data-protection responsibilities can be sent to privacy@signetdocs.ai.
This policy applies to all visitors to our website, prospective customers, account holders, signatories who receive or complete documents via Signet, and anyone else whose personal data we process in connection with our services.
When you create an account or sign up for a trial, we collect your name, email address, job title, and company name. If you purchase a paid plan, we also collect your billing address and VAT number where applicable.
When you use Signet to send, sign, or manage documents, we process the content of those documents, the names and email addresses of signatories, IP addresses and device information associated with signing events, timestamps, and audit trail data. This information forms part of the tamper-evident audit record for each document.
Subscription purchases are processed by Paddle as merchant of record. If a customer connects its own Mollie account to collect payments on proposals, those proposal payments are processed by Mollie on that customer's behalf. Signet does not store full card numbers or sensitive payment credentials. We retain transaction references, amounts, and status records for accounting and dispute resolution purposes.
We automatically collect log data when you access our platform, including your IP address, browser type and version, operating system, referring URLs, pages viewed, and timestamps. We also collect performance and error data to help us maintain and improve the service.
If you contact us by email or via any support channel, we retain the content of that correspondence and any information you provide in it.
If you opt in to marketing communications, we retain your email address and preferences for that purpose. We never sell your personal data to third parties for their own marketing.
We use your personal data to:
Under UK GDPR, we rely on the following legal bases:
We do not sell your personal data. We share it only in the following circumstances:
We work with carefully selected third-party processors who act on our instructions. These currently include:
All processors are subject to data processing agreements and are required to maintain appropriate technical and organisational security measures.
We use DocuSeal software on infrastructure operated for Signet to provide document preparation, delivery and electronic signing. Document content and signer data handled by this signing engine are processed within the organisation's configured UK or EU environment. Our EU signing server is located in Amsterdam, Netherlands. We do not use DocuSeal Cloud to process signing documents; DocuSeal is the software provider for our self-hosted engine, rather than our cloud signing sub-processor. Infrastructure and delivery providers may process data as described in this policy.
When you send a document for signing, the recipients will see your name, company name, and email address as the sender. When a signatory completes a document, their name, email address, signing timestamp, and IP address are included in the audit trail and made available to the document sender.
We may disclose personal data where required to do so by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Signet, our customers, or others.
Signet is a sovereign-first platform. Your document data is stored exclusively on servers located in the United Kingdom (UK region) or the European Economic Area (EU region), according to your account configuration. We do not transfer document content outside these jurisdictions.
Certain operational providers, including Paddle group companies and Resend, may process limited account, billing or email-delivery data outside the UK or EEA. Where a restricted transfer occurs, we require an applicable lawful transfer mechanism, such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses.
We retain personal data for as long as necessary for the purposes set out in this policy, and in accordance with our legal obligations:
When retention periods expire, data is securely deleted or anonymised.
As a data subject under UK GDPR, you have the following rights. You can exercise any of them by contacting us at privacy@signetdocs.ai. We will respond within one calendar month.
You may request a copy of the personal data we hold about you, including information on how we use it.
You may ask us to correct inaccurate or incomplete personal data we hold about you.
In certain circumstances you may ask us to delete your personal data, subject to our legal obligations.
You may ask us to restrict the processing of your personal data in certain circumstances, for example whilst a complaint is being resolved.
Where processing is based on consent or contract and carried out by automated means, you may receive your data in a structured, commonly used format.
You may object to processing based on legitimate interests or for direct marketing purposes at any time.
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
We use cookies and similar tracking technologies on our website. These fall into the following categories:
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the platform.
We take the security of your data seriously. Our technical and organisational measures include encryption of data in transit (TLS 1.2+) and at rest, access controls and role-based permissions, audit logging of all administrative actions, regular security reviews, and isolated UK and EU infrastructure that does not share data with US-based cloud services.
Despite these measures, no internet transmission is completely secure. If you believe your account has been compromised, please contact us immediately at security@signetdocs.ai.
Signet is a business platform. Our services are not directed at children under the age of 18 and we do not knowingly collect personal data from minors. If you believe a minor has provided personal data to us, please contact us and we will take appropriate steps to delete it.
We may update this Privacy Policy from time to time. Where changes are material, we will notify account holders by email and update the effective date above. Your continued use of Signet after the effective date constitutes acceptance of the updated policy.
Previous versions of this policy are available on request.
For any questions or concerns about this policy, to exercise your data rights, or to request a copy of our Data Processing Agreement, please get in touch:
Data Controller
Company number SC895904
Registered in Scotland
Email: privacy@signetdocs.ai
ICO Supervisory Authority
Information Commissioner's Office: ico.org.uk