GDPR Compliance

Our Commitment to GDPR

SignTry is fully committed to complying with the General Data Protection Regulation (GDPR) which came into effect on May 25, 2018. We have implemented comprehensive data protection measures to ensure the privacy and security of our users' personal data.

This page outlines our approach to GDPR compliance and explains your rights as a data subject under this regulation.

What is GDPR?

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect in the European Union (EU) on May 25, 2018. It strengthens the rights of individuals regarding their personal data and imposes strict rules on organizations that collect, process, or store this data.

GDPR applies to all organizations processing personal data of individuals in the EU, regardless of the organization's location.

Data We Collect and Process

As part of our services, we collect and process the following categories of personal data:

Account Information

When you create an account with SignTry, we collect information such as your name, email address, and company details to provide you with our services.

Email Signature Data

We process the information you include in your email signatures, such as contact details, social media links, and profile pictures, to create and manage your signatures.

Usage Data

We collect information about how you interact with our services, including feature usage, click tracking data, and analytics to improve our services.

Technical Data

We automatically collect certain technical information when you use our services, such as IP addresses, browser type, and device information for security and functionality purposes.

Your GDPR Rights

Under GDPR, you have several important rights regarding your personal data:

Right to Access

You have the right to access the personal data we hold about you and receive a copy of this data.

Right to Rectification

You have the right to correct inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances.

Right to Restriction

You have the right to restrict the processing of your personal data in certain circumstances.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances.

Right to Portability

You have the right to receive your personal data in a structured, commonly used format.

Our Data Protection Measures

We have implemented comprehensive technical and organizational measures to ensure the security of your personal data:

Technical Security

Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption
Access Controls: Strict access controls and authentication mechanisms
Regular Security Audits: Continuous monitoring and regular security assessments
Data Backup: Regular backups with disaster recovery procedures

Organizational Measures

Data Protection Officer: Appointed a Data Protection Officer to oversee compliance
Employee Training: Regular GDPR and data protection training for all staff
Data Processing Agreements: DPAs with all third-party processors
Privacy by Design: Incorporating data protection into our product development process

Data Transfers

SignTry may transfer personal data to countries outside the European Economic Area (EEA). When we do, we ensure appropriate safeguards are in place, such as:

Adequacy decisions by the European Commission
Standard Contractual Clauses (SCCs)
Binding Corporate Rules (BCRs)
Other approved transfer mechanisms under GDPR

Data Breach Notification

In the event of a personal data breach, we have procedures in place to:

Contain and assess the breach
Notify the relevant supervisory authority within 72 hours where required
Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms
Document all data breaches for accountability purposes

Changes to This Policy

We may update this GDPR compliance statement from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We encourage you to periodically review this page for the latest information on our GDPR compliance.