Privacy Policy

Analytics and diagnostics: we use product analytics and error tracking services to understand usage and fix problems. These may process account identifiers, in-app activity, and technical metadata. Our public website uses standard web analytics. Where session diagnostics are active, in-app screens may be captured with data fields masked.

Link analytics: workspaces can use link click reporting. When this feature is active, links added to signatures resolve via a redirect service, and click events are logged (IP address, browser and device metadata, timestamp) to provide click reporting to the workspace. Workspace owners can have this feature disabled, after which signatures are re-issued with direct links.

• Information you provide: We collect information you give us directly while using our SaaS such as your name, email, address, payment details, and any other information you choose to share.
• Information we collect automatically: We collect data about your device (IP address, browser type) and how you use our SaaS (page views, actions taken).

We process your data with lawful bases under GDPR:

• To provide the SaaS: Processing is necessary to provide the necessary services to you.
• To improve our services: We analyze usage data to enhance our SaaS and offerings, conducted under our legitimate interests.
• To communicate with you: We may use your information to send updates, support messages, and with your consent, marketing communications that you can choose not to receive.
• To comply with legal obligations: We may use or disclose data only for the law, protect our rights, or in response to government requests.

We share your information in limited circumstances:

• Third-party service providers: To assist with essential functions, only when necessary and under contractual or platform data-protection terms appropriate to each service. These include hosting, billing, email delivery, analytics, and error tracking providers. A current list of the categories of providers we use is available on request.
• Affiliated entities: If there is a change in business structure.
• Law enforcement or legal reasons: To comply with the law or legal requests, and to protect our rights and the rights of others.

You can connect AI assistants such as Claude, ChatGPT, Cursor and other clients that support the Model Context Protocol to your SyncSignature workspace at https://mcp.syncsignature.com/mcp. You authorize each connection through SyncSignature sign-in, choose the workspace, and choose read access or read and write access. You can remove the connection from your assistant at any time, and SyncSignature support revokes a connection's access completely on request.

When you ask your assistant to use SyncSignature, the assistant sends SyncSignature the request and receives the workspace data needed to answer it: teammate names, email addresses, job titles, departments, phone numbers, profile image URLs, group and template details, campaign details, integration status and signature link click data. SyncSignature does not receive your conversations with the assistant beyond these requests, and does not route or read your email.

Data returned to the assistant is handled under that assistant provider's own terms and privacy policy. SyncSignature stores workspace data on AWS in Mumbai and keeps it as described under Data Retention below. We log each request for security and support: the time, the action, the connecting client, the workspace, the IP address, the result and, for requests that change data, the details of the requested change. We keep these logs for 90 days. We do not sell this data or use it to train models. We prepare a DPA on request at support@syncsignature.com.

We maintain robust security measures designed to protect your personal information. We implement technical and organizational safeguards aligned with best practices and the sensitivity of the data we handle.

Under GDPR and CCPA, you have rights, such as:

• Right to be informed: Detailed in this Policy.
• Right of access: Learn what data we hold and how it's processed.
• Right to rectification: Correct inaccurate information.
• Right to erasure: Request deletion under specific conditions.
• Right to restrict processing: Limit certain uses of your data.
• Right to object: Object to specific processing, such as profiling.
• Right to data portability: Receive your data in a structured format (where applicable).
• Right not to sell: CCPA grants the right to opt out of the sale of personal information.

We store your information only as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

We use cookies and similar technologies to personalize your experience. You can manage cookie preferences through your browser settings.

We may update this policy. We will notify you of material changes via email or a notice within the SaaS.

If you have questions about this Privacy Policy or our data practices, please contact us at: legal@syncsignature.com