Privacy Policy

Account information. Your name, email address, password (stored only as a hash), organization name and role. If you sign in with Google, we receive your name, email address and profile image from Google.

Content you send and receive. The documents you upload, the fields you place, and the signed documents. Where a sender asks a signer for a supporting file, such as an image of an identification document, we store that file with the document on the sender's instructions.

Signer information. When a document is sent to you for signature, we process your name and email address, your IP address, the time you sign, the signature you apply, and any file you upload at the sender's request. You do not need a SigningUS account to sign.

How signing requests reach signers. SigningUS sends signing invitations, verification codes and completion emails by email only. A sender may also copy a signing link and share it through an app of their choice, such as WhatsApp. A message sent that way goes through that app under its own terms, not through SigningUS.

Billing information. Paid plans are billed through our payment processor, Stripe. Card details are entered on Stripe's checkout page and go directly to Stripe. We do not receive or store full card numbers.

Website and usage data. Browser and device type, IP address and application logs, used to keep the service secure and working. On our public website we use Google Analytics, through Google Tag Manager, to understand how visitors use the site, including pages visited.

• To provide the service: routing signing requests, applying signatures, storing documents and recording what happened to each document.
• To secure accounts and the platform, prevent fraud and impersonation, and fix problems.
• To bill for paid plans and process refunds.
• To communicate with you about your account, answer support requests and send service and security notices.
• To send product updates where permitted. You can opt out at any time. Service and security notices continue regardless.

Artificial intelligence. We do not use customer content, signer data or uploaded identification documents to train artificial intelligence models, and we do not send this content to any AI provider.

Where the EU or UK GDPR or the Bangladesh Personal Data Protection Act, 2026 applies, we rely on the following.

Where we rely on consent, you can withdraw it at any time.

With the people in a document. Content in a document is shared with the recipients the sender designates.

With subprocessors. We use a small number of service providers who process data on our behalf under written contracts. Each is named at signingus.com/subprocessors. We do not use any identity-verification service: an identification file a signer uploads is not sent to any verification provider.

For legal reasons. Where the law requires it, or where necessary to protect the rights, property or safety of KTL, our users or the public.

On a change of control. If KTL is involved in a merger, acquisition or sale of assets, we will give notice before personal data is transferred and becomes subject to a different privacy policy.

We do not sell your personal data and do not share it for advertising.

The SigningUS application does not set its own cookies. It keeps your session, name, email address and display preferences in your browser's local storage, and signing out clears them, except display preferences. Our public website uses cookies for security and analytics. Details are in our Cookie Policy.

You can download your documents from your account at any time.

Connections to SigningUS use HTTPS with TLS 1.2 or higher. Stored documents are encrypted at rest, and passwords are stored only as hashes. More detail is on our security page and in Annex II to our Data Processing Agreement. No method of transmission or storage is completely secure.

If a personal data breach affects you, we will notify affected customers without undue delay and, where feasible, within 72 hours of becoming aware of it, and will notify supervisory authorities where the law requires.

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to withdraw consent. Email privacy@signingus.com. We may need to verify your identity, and we respond within the period the applicable law requires.

If you are a signer without a SigningUS account, the sender controls the document. You can contact the sender directly, or contact us and we will pass your request to them.

If you are in the EEA, the UK or Switzerland, you may also complain to your local supervisory authority.

If you live in California or another US state with a comprehensive consumer privacy law, this section applies in addition to section 9.

We do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the past twelve months. We process identification documents only on the sender's instructions and do not use them to infer anything about you. We will not discriminate against you for exercising a privacy right. You may use an authorized agent; we may ask for proof of authorization.

Our application and database are hosted with Amazon Web Services in the United States. Documents are stored with Cloudflare, which also delivers our website and application through its global network. Email is sent through Amazon Web Services in the United States. Members of our team in Bangladesh access data to develop, run and support the service.

For transfers from the EEA, the UK or Switzerland, we rely on the European Commission's standard contractual clauses and, for the UK, the international data transfer addendum.

SigningUS is not directed at anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, email privacy@signingus.com and we will delete it.

If we make material changes, we will update the date above and notify account holders by email or in the service before they take effect.

Privacy: privacy@signingus.com · Security: security@signingus.com · Legal notices: legal@signingus.com

Khulna Technologies LLC, 4520 East-West Highway #780, Bethesda, MD 20814, United States · +1 (240) 400-7275