Free2Sign

Legal

Privacy Policy

Effective Date: November 13, 2026·Last Updated: November 13, 2026
Welcome to Free2Sign.com ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our open-source digital agreement and e-signature platform.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.

1. Information We Collect

A. Information You Provide Directly

  • Account & Contact Data: When you register for an account, create an envelope, or contact support, we collect your name, email address, phone number (for SMS OTP verification), and account credentials.
  • Transaction & Billing Data: If you purchase enhanced signature tiers (such as Qualified Electronic Signatures / QES), payment card details are collected securely through our payment processors (e.g., GoDaddy Payments / Poynt). We do not store raw credit card numbers on our servers.
  • Document & Signing Metadata: Names, email addresses, IP addresses, browser user-agents, and cryptographic sign-off confirmations of individuals who send, view, or sign agreements through our platform.

B. Information Collected Automatically

  • Log & Device Data: Browser type, operating system, IP address, access times, pages viewed, and the referring URL.
  • Cookies & Tracking Technologies: We use local storage and essential session cookies to maintain your authenticated session and secure client-side cryptographic operations.

2. How We Use Your Information

  • Provide, maintain, and improve our digital agreement routing and e-signature workflows.
  • Process transactions and deliver payment receipts for optional QES add-ons.
  • Generate legally compliant audit trails, timestamps, and Certificates of Completion.
  • Verify user identity through multi-factor authentication (e.g., SMS OTP, email validation, or third-party IDV integrations).
  • Protect against fraudulent transactions, unauthorised document modifications, and security breaches.
  • Comply with legal obligations under applicable e-signature statutes (e.g., US ESIGN Act, UETA, eIDAS).

3. How We Share Your Information

We do not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

  • With Signers and Counterparties: Document content, signatures, audit trails, and execution records are shared with designated participants involved in your specific agreement.
  • Service Providers: With trusted third-party vendors who assist us in operating our platform, processing payments (GoDaddy Payments / Poynt), or performing independent timestamping (RFC 3161 Time-Stamping Authorities), under strict data protection obligations.
  • Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena).

4. Data Security & Storage Architecture

  • Encryption in Transit & Rest: All communications are secured using strict HTTPS/TLS encryption. Sensitive document payloads utilise zero-knowledge client-side encryption and Web Crypto API standards.
  • Self-Contained Records: Executed agreements contain embedded cryptographic seals and hashes, allowing independent validation without relying on internal server logs.
  • User-Controlled Storage: You maintain control over your data, with options to link personal storage endpoints or utilise decentralised storage protocols.

5. Your Data Protection Rights

Depending on your jurisdiction (such as GDPR or CCPA), you may have the following rights regarding your personal data:

  • Access & Portability: Request copies of your personal data or executed agreements.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request erasure of your account and personal data, subject to legal record-retention requirements for executed contracts.
  • Restriction: Object to or restrict the processing of your data.

To exercise any of these rights, please contact us at the address listed below.

6. Third-Party Links & Services

Our platform may integrate with or link to external services (such as payment gateways or third-party Identity Verification providers for QES). We are not responsible for the privacy practices of those external sites and encourage you to review their respective policies.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your information.

8. Contact Us

If you have questions, comments, or concerns about this Privacy Policy or our data practices, please contact us at:

Website: https://free2sign.com

Email: support@free2sign.com