Last updated: 30th June 2026. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use UnderSign Toolkit, including our website, applications, APIs, and related services.
UnderSign Toolkit ("Service", "Platform", "we", "us", or "our") is a product owned and operated by Xcesslogic. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
Account information. When you create an account, we may collect your full name, email address, organization name (optional), account credentials, and account preferences.
Document and signature information. When using the Service, we may collect and store documents uploaded by users, signature images and signature data, form field data, recipient information, document metadata, signing history, audit trail information, and certificate of completion data.
Technical information. We may collect IP addresses, login and access timestamps, device identifiers where technically necessary, API usage information, and security logs.
Cookies and authentication data. We use cookies and similar technologies to maintain login sessions, remember user preferences, improve platform security, and prevent fraudulent access.
We use information to provide electronic signature services, create and maintain user accounts, generate audit trails and signing certificates, secure the platform, detect fraud and abuse, enforce usage limits, provide customer support, improve platform performance, and comply with legal obligations.
Where applicable under GDPR and similar regulations, we process data based on user consent, performance of a contract, compliance with legal obligations, legitimate business interests, and security and fraud prevention purposes.
Users retain ownership of documents uploaded to the Service. We do not claim ownership of user documents, signatures, or document content. Users are solely responsible for the legality, accuracy, and appropriateness of documents they upload or send through the Service.
Documents and account information are stored on servers located within the European Union. Users acknowledge that information may be processed in multiple jurisdictions necessary for operation of the Service.
Account information is retained while an account remains active. Documents and associated information may be retained for up to three (3) months following account deletion before permanent removal. Accounts inactive for six (6) months may be scheduled for removal, and we will attempt to provide at least three (3) months advance notice before account removal due to inactivity.
We do not sell personal information. We may disclose information to comply with legal obligations, respond to lawful requests, protect platform security, investigate abuse or fraud, during mergers, acquisitions, or asset transfers, or when required by law.
We implement reasonable administrative, technical, and organizational safeguards to protect information. However, no internet-based service can guarantee absolute security. Users acknowledge and accept this risk.
Users accessing the Service from outside the European Union acknowledge that information may be processed and stored in jurisdictions different from their own.
Currently, the Service does not send marketing communications. We reserve the right to introduce newsletters, service updates, product announcements, and promotional communications in the future, subject to applicable laws and user preferences.
Subject to applicable law, users may request access to, correction of, deletion of, or export of their information, or restriction of processing. Requests may be submitted to support@xcesslogic.com.
The Service is intended solely for individuals eighteen (18) years of age or older. We do not knowingly collect information from children.
We may update this Privacy Policy at any time. Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
Privacy inquiries may be directed to support@xcesslogic.com.