Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last updated: January 1, 2024
Your documents are encrypted with 256-bit encryption
We never sell your personal information to third parties
You control who can access your documents
You can export or delete your data at any time
When you create an account, we collect your name, email address, and password. If you sign up using a third-party service like Google, we receive your profile information from that service.
We store the documents you upload for signing, including any signatures, initials, and other annotations added during the signing process. Documents are encrypted and stored securely.
We automatically collect information about how you use MamaSign, including pages visited, features used, and time spent in the application. This helps us improve our services.
We collect information about the devices you use to access MamaSign, including device type, operating system, browser type, IP address, and unique device identifiers.
We use your information to provide, maintain, and improve MamaSign, including processing document signatures, sending notifications, and providing customer support.
We may send you service-related emails, such as account verification, transaction confirmations, and important updates. You can opt out of marketing communications at any time.
We use your information to detect, prevent, and respond to fraud, abuse, security risks, and technical issues that could harm MamaSign or our users.
We analyze usage patterns to understand how users interact with MamaSign, which helps us prioritize features and improve the user experience.
We share your information when you direct us to, such as when you send a document to another party for signature or share a signed document.
We work with trusted third-party companies that help us provide MamaSign, including cloud hosting, email delivery, and analytics. These providers are bound by strict confidentiality agreements.
We may disclose your information if required by law, such as in response to a valid subpoena or court order, or to protect the rights and safety of MamaSign and our users.
If MamaSign is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
All data transmitted to and from MamaSign is encrypted using TLS 1.3. Documents at rest are encrypted using AES-256 encryption. Your passwords are hashed and salted.
We use enterprise-grade cloud infrastructure with SOC 2 Type II certification. Our data centers have 24/7 physical security, redundant power, and environmental controls.
Access to user data is strictly limited to employees who need it to do their jobs. We use multi-factor authentication and audit logs to track all access.
We have a dedicated security team and incident response plan. In the event of a data breach, we will notify affected users as required by applicable law.
You can access your personal information at any time through your account settings. You can also request a copy of your data in a portable format.
If your personal information is inaccurate or incomplete, you can update it through your account settings or by contacting our support team.
You can request deletion of your account and associated data. Some information may be retained as required by law or for legitimate business purposes.
You can opt out of marketing communications at any time. You can also control cookies and tracking technologies through your browser settings.
MamaSign processes data in the United States and other countries where we or our service providers operate. We ensure appropriate safeguards are in place for international transfers.
For users in the European Economic Area, we comply with GDPR requirements including data processing agreements and standard contractual clauses for data transfers.
We adhere to the principles of the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, although we recognize these may no longer serve as valid transfer mechanisms.
MamaSign is not intended for children under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website before the changes take effect.
If you have any questions about this Privacy Policy or our data practices, please contact our privacy team.
privacy@mamasign.com