Privacy Policy

1. Introduction

LedgerSign ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our blockchain-verified document signing platform.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and contact information (email address, phone number)
• Company name and business information
• Payment information (processed securely by our payment providers)
• Documents you upload to our platform
• Digital signatures and verification data

2.2 Automatically Collected Information

When you use our services, we automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Location information (based on IP address)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process document signing and verification requests
• Record document signatures on the blockchain
• Send transactional emails and notifications
• Provide customer support
• Detect and prevent fraud and security threats
• Comply with legal obligations
• Send marketing communications (with your consent)

4. Blockchain and Data Immutability

When a document completes signing on a plan that includes blockchain verification, LedgerSign writes an anchor record to the Hedera public blockchain. This record is permanent and cannot be deleted or modified by anyone, including us.

The anchor record does not contain the document. It contains a SHA-256 hash of the completed document (from which the document cannot be reconstructed) together with signing metadata for that completion: the document and organization identifiers, and for each signer the email address, the time of signing, and the IP address recorded at signing. Because the ledger is public and permanent, this metadata cannot be erased once written. If you or your signers do not want this metadata on a public ledger, use a plan without blockchain verification or contact us before sending.

5. Cookies and Similar Technologies

Our marketing site (ledgersign.io) sets one category of cookie, and only after you accept it in the banner shown on your first visit:

• Analytics (Google Analytics 4): cookies named _ga and _ga_*, set by Google, used to count visits and see which pages are useful. They persist for up to two years. If you reject, the Google Analytics script is not loaded at all and no analytics cookie is set.

Your choice is stored in your browser for twelve months, after which we ask again. You can change it at any time by clearing your browser's site data for ledgersign.io. The marketing site sets no advertising cookies and no cookies from any other third party. The application (app.ledgersign.io) uses strictly necessary cookies and local storage to keep you signed in; these do not require consent and are described in the application.

We also use browser session storage (not a cookie) on the marketing site to remember, for the duration of your visit, how you arrived and which of our pages you viewed. This information stays in your browser and is sent to us only if you submit the contact form, as described in the next section. It is discarded when you close the tab.

6. The Contact Form

When you submit the contact form we receive what you typed (name, email address, company, message) and, so that we can respond usefully, the following about the visit in which you sent it: the page that referred you to us and any campaign tags in that link, the pages on ledgersign.io you viewed during the visit and how long you spent, your browser language, screen size, and device type, and your IP address. If you accepted analytics cookies, we also receive the Google Analytics client identifier so we can relate your message to your visit.

From your IP address we derive an approximate location (country, region, city) and the network operator. From your email domain we check whether it is a personal mailbox provider or a company domain and, for company domains, read the public title and description of that company's website. We do not purchase or look up any other information about you.

We use this information to answer your enquiry and to understand which of our pages and campaigns lead people to contact us. It is stored in our systems and delivered by email to the LedgerSign team members who handle enquiries. It is not shared with anyone else and is not used for advertising. You may ask us to delete it at any time by writing to support@ledgersign.io.

7. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who help us operate our platform (hosting, payment processing, analytics)
• Other Users: When you share documents or signatures with them
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. Data Security

We implement security measures to protect your information, including:

• Data encryption in transit and at rest
• Secure data transmission (TLS/SSL)
• Ongoing security review of our code and infrastructure
• Access controls and authentication measures
• Role-based access controls

9. Your Rights

Depending on your location, you may have the following rights:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information (subject to legal obligations)
• Object to or restrict processing
• Data portability
• Withdraw consent

10. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Documents are stored according to your plan's retention period. Blockchain records are permanent and cannot be deleted.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform.