Privacy Policy

1. Who we are

SignDeck is an electronic signature and document collaboration service operated by Nordic Ehandel Experten AB ("we", "us"). We are the data controller for personal data processed through signdeck.io. You can reach us at privacy@signdeck.io.

2. Data we collect

• Account data: name, email address and authentication identifiers (including Google sign-in identifiers).
• Document data: contracts and documents you upload, document contents, comments and revision history.
• Signer data: signer name, email address, typed or drawn signature image, consent record, signature timestamp (UTC) and IP address, recorded in the audit trail for evidentiary purposes.
• Billing data: subscription plan, billing status and transaction identifiers. Card details are collected and stored by Paddle, not by us.
• Technical data: approximate country (used to pick your language and display currency), browser and device information, and security logs.

3. How we use data

We process personal data to provide the service (sending contracts, capturing signatures, generating audit trails and signed copies), to authenticate users, to deliver transactional and reminder emails, to process subscriptions and template purchases, to prevent abuse and to comply with legal obligations. Our legal bases are performance of a contract, legitimate interests (security and service improvement), consent (where required) and legal obligation.

4. Sharing

We share data only with processors who help us run the service: our cloud hosting and database provider, our email delivery provider, and Paddle.com Market Ltd, which acts as Merchant of Record and processes all payments, taxes and refunds. Signed documents are shared with the signers and recipients you designate. We do not sell personal data.

5. Retention

Documents, signatures and audit records are retained for as long as your account is active, and afterwards only as required for legal, accounting or evidentiary purposes. You can delete individual documents at any time; deleting your account removes your documents and personal data within 30 days, except records we must keep by law.

6. Your rights

If you are in the EEA or UK you have the right to access, rectify, erase, restrict or port your personal data, and to object to processing. Contact privacy@signdeck.io and we will respond within 30 days. You may also lodge a complaint with your local data protection authority (in Sweden, Integritetsskyddsmyndigheten).

7. Security and transfers

Documents are stored in private storage with row-level access control, transmitted over TLS, and reachable only through authenticated sessions or unique signing links. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses.

8. Cookies

We use strictly necessary cookies and local storage for authentication, language preference and checkout. We do not use advertising cookies.

9. Changes

We will post any changes to this policy on this page and update the date above.