Privacy Notice
Last updated: 2026-06-12. ZingZee Sign is in private beta; this page is a placeholder pending final review.
This Privacy Notice explains what data ZingZee Sign processes when you use the service, why we process it, and how long we keep it.
1. Data we process
- Sender account details (name, email, hashed password).
- Recipient details supplied by the sender (name, email, optional phone).
- Documents uploaded for signature.
- Signature, initials, typed name, timestamp, IP address, and user agent at signing time.
- Audit events (created, viewed, signed, completed, declined, voided).
2. Why we process it
To deliver the e-signature workflow, produce a legally meaningful audit trail, and meet our obligations under ESIGN, UETA, and (for EU recipients) eIDAS.
3. Retention
Signed envelopes are purged from ZingZee Sign servers 24 hours after completion. Customers using Bring-Your-Own Storage retain documents in their own Dropbox, Google Drive, OneDrive, or S3-compatible bucket. We do not back up customer documents off-platform.
4. Sharing
We do not sell or share personal data with third parties for marketing. We use the sub-processors listed at /legal/subprocessors to run the service (hosting, email, optional SMS).
5. Your rights
EU/UK residents have rights of access, rectification, erasure, and portability under the GDPR/UK-GDPR. Email [email protected] to exercise them. A Data Processing Agreement is available on request.
6. Security
Documents and signature images are encrypted at rest (AES-128 + HMAC via Fernet). Transport is TLS. Audit logs are append-only with a SHA-256 hash chain.
7. Contact
Last reviewed: 2026-06-18.
Questions? Email [email protected].