Privacy Policy
The short version: we collect what we need to run Sign Veli and prove who signed what. We don’t sell your information, we don’t read your documents for advertising, and the PDF tools that run in your browser never send your files to us.
1. Who this policy covers
Sign Veli is provided by CSM Technologies, a business registered in the Republic of Maldives (“we”, “us”). This policy explains how we handle personal information about account holders, the members of Company accounts, Signers who receive documents through Sign Veli, and visitors to our website.
For the documents you upload and send, you (or your company) decide what goes in them and who receives them, and we process that content on your behalf. For your account, billing and use of the Service, we decide how the information is used and are responsible for it.
2. Information we collect
You give us
- Account details — name, email address, password (stored only as a secure hash), account type and, for Company accounts, the company name.
- Google Sign-In — if you choose it, your name, email address and profile picture from Google. We never see your Google password.
- Documents and signatures — files you upload, the fields you place, the names and email addresses of Signers you add, and the signatures, initials and form entries you or your Signers make.
- Billing details — plan, purchases and invoices. Card details are handled by our payment provider; we do not store full card numbers.
- Messages to us — anything you send when you contact support.
We collect automatically
- Audit trail — when a document is sent, viewed, signed or declined: timestamps, IP address, browser and device information, and the email address the link was sent to. This proves who signed what, and when.
- Usage and delivery — how many signs you use, and whether our emails were delivered, opened or bounced.
- Technical data — logs and security events such as sign-ins, used to keep the Service running and safe.
We don’t collect
Files you open in Sign Veli’s browser-based PDF tools (merge, split, compress and so on) are processed on your device and are never uploaded to us.
3. How we use it
- to create and run your account, and to deliver documents to the people you choose;
- to produce completed documents and audit trails that show how they were signed;
- to send you service emails — confirmation links, signing requests, reminders, receipts;
- to measure usage, bill you and prevent abuse of free allowances;
- to keep the Service secure, detect fraud and fix problems;
- to improve Sign Veli using aggregated, de-identified usage information;
- to comply with the law and enforce our Terms of Service.
We do not sell personal information, we do not use your documents for advertising, and we do not use your documents to train AI models.
Where laws such as the GDPR apply, we rely on: performing our contract with you (running the Service); our legitimate interests (security, fraud prevention, improving the Service); legal obligations (tax and accounting records); and your consent where we ask for it, which you can withdraw at any time.
5. How long we keep it
We keep account information while your account is open. Documents and their audit trails are kept until you or your company deletes them, or until a retention policy set by your company removes them. A legal hold set by a company account owner can keep documents beyond their normal retention.
When you close your account we delete or anonymise your personal information within a reasonable period, except billing records and other information we must keep for legal, tax or accounting reasons, and documents that belong to a company account or that others still hold as participants.
6. Security
We protect data with encryption in transit (TLS) and at rest, access controls that keep each account’s data separate, hashed passwords, and an audit trail and fingerprint for every completed document. No service can be perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as the law requires. See Security & Compliance for more.
7. International transfers
Sign Veli’s application, database and documents are hosted on Google Cloud in Taiwan (the asia-east1 region), and our providers may process information in other countries, including the United States. When we transfer personal information across borders, we use appropriate safeguards required by applicable law, such as standard contractual clauses.
8. Your choices and rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy;
- correct information that is wrong;
- ask us to delete it, or to restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent you gave us;
- complain to your local data protection authority.
You can manage your saved signatures and two-step verification in your account. You can also download a copy of your information, and delete your account, yourself: open the account menu and choose Your data. For anything else, such as correcting your information, email [email protected]. If you signed a document sent by a company account, we may refer your request to that company, since it controls the document.
A signed document is a record shared by everyone who took part. Deleting your account does not remove your signature from copies other participants already hold.
10. Children
Sign Veli is not intended for children, and we do not knowingly collect personal information from anyone under 16. If you think a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as Sign Veli changes. If a change is material, we will tell you by email or in the app before it takes effect. The date at the top shows when it was last updated.
12. Contact us
For privacy questions or requests, email [email protected]. We aim to reply within 30 days.