Privacy Policy

Last updated: April 2026 · Version 1.0

1. Introduction

NTSsign ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our electronic signature platform and related services (the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use the Service.

2. Data We Collect

2.1 Data You Provide Directly

• Account information: name, email address, phone number, company name, and billing details when you register or subscribe
• Document data: the content of documents you create, upload, or sign through the Service, including customer names, addresses, and contract details
• Communications: messages you send to us via email, support chat, or contact forms
• Payment information: credit card numbers, billing addresses, and payment details processed through our payment provider

2.2 Automatically Collected Data

• Device information: browser type, operating system, device type, and screen resolution
• Usage data: pages visited, features used, time spent on the Service, and interaction patterns
• Log data: IP address, access times, referring URLs, and error logs
• Cookies and similar technologies: as described in our Cookie Policy

2.3 Third-Party Data

• Signature verification data: information provided by our electronic signature provider (BoldSign) to verify signature events and maintain audit trails
• Analytics data: aggregated usage statistics from analytics providers

3. How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your documents and electronic signatures
• Send transactional emails (signature requests, completion notifications, receipts)
• Process payments and manage your subscription
• Provide customer support and respond to inquiries
• Improve the Service through usage analytics and feedback
• Detect, prevent, and address fraud, security issues, and technical problems
• Comply with legal obligations and enforce our Terms of Service
• Send you updates about the Service (you may opt out at any time)

4. Data Sharing

4.1 Service Providers

We share data with the following categories of service providers who help us operate the Service:

4.2 Legal Requirements

We may disclose your data if required to do so by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change and any choices you may have.

4.4 With Your Consent

We may share your data for purposes not described in this policy only with your explicit consent.

5. Storage and Security

5.1 Where We Store

Your data is stored on servers located in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States.

5.2 Security Measures

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for stored data
• Bcrypt password hashing with salting
• JWT-based authentication with token expiration
• Role-based access control (RBAC)
• Regular security audits and vulnerability assessments
• Cloudflare DDoS protection and Web Application Firewall

5.3 Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data for up to 90 days for backup and recovery purposes, and as required by law. Document audit trails may be retained longer to support the legal validity of signed documents.

6. Your Rights

All Users

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Export your documents and data
• Opt out of marketing communications
• Close your account at any time

California Users (CCPA/CPRA)

If you are a California resident, you additionally have the right to:

• Know what categories of personal information we collect and why
• Request deletion of your personal information
• Opt out of the "sale" of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights
• Limit the use of sensitive personal information

European Users (GDPR)

If you are located in the European Economic Area, you additionally have the right to:

• Data portability — receive your data in a structured, machine-readable format
• Object to processing of your data for legitimate interests
• Restrict processing of your data in certain circumstances
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local data protection authority

7. Cookies

We use cookies and similar technologies to operate the Service and improve your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

8. Minors

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly. If you believe a minor has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service at least 30 days before they take effect. The "Last updated" date at the top of this policy indicates when it was last revised.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at privacy@noatechsolutions.com.