Privacy Policy
Who we are
Privio Labs, Inc, trading as Privio, is the data controller for the personal data described in this notice. We decide what is collected, why, and how long it is kept.
Where you use Privio to collect signatures from your own clients or visitors, you are the controller of those signed records and we act as your processor.
What we collect
From senders: your email address, your company or personal name, and the documents you publish.
From signers: the full legal name entered, the drawn signature image, the date and time of signing, the consent confirmation, an optional email address, and, where the signer is a minor, the parent or guardian's name, signature and optional email address.
Who can see it
A signed document is visible only to the account that published it. Other Privio accounts cannot see your documents or your signed records, and we do not sell, rent or share them with advertisers.
We share personal data with a limited set of recipients: our hosting and database provider, which stores your account and signed records; Paddle.com, our Merchant of Record, which handles the sale of subscriptions and event passes, payment processing, subscription management, tax compliance and invoicing; our professional advisers where necessary; and public authorities where the law requires it.
Paddle collects the billing details you enter at checkout directly. We receive only the identifiers needed to link a purchase to your account, such as a customer reference, plan and payment status. We never see or store your full card number.
Our legal bases are: performance of our contract with you (running your account and processing your plan), our legitimate interests (keeping the service secure and improving it), and legal obligation (tax and accounting records).
Why we keep it
Signed records are kept so that both the sender and the signer have evidence of what was agreed and when. Account data is kept to operate your account and manage billing.
How long we keep it
Signed records stay in the publishing account's vault until that account deletes them or closes the account. Deletion is permanent and cannot be reversed.
Your choices
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a portable copy, to withdraw consent, and to complain to your local data protection authority. Email hello@privio.online and we will respond within one month.
Senders can delete any document or signed record from the vault at any time, and can export signed agreements as PDF.
Signers who want a copy of, or the removal of, their signed record should contact the organisation that asked them to sign, since that organisation controls the record.
Security
Data is transmitted over encrypted connections and stored with access rules that restrict each record to its owning account. No system is perfectly secure, so we also encourage you to keep your own copies of anything critical.