Privacy Policy | Unlayered

Last updated: November 2024

1. WHAT INFORMATION DO WE COLLECT?

Personal Information Provided by You

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

names
phone numbers
email addresses
job titles
company names
contact preferences
signatures (electronic and digital)
documents and forms you create or upload
IP addresses for signature verification
device information for signature authentication

Sensitive Information

We may process sensitive information when necessary to provide our Services. This includes:

Electronic signature data and biometric information used for signature verification
Government-issued identification numbers when required for identity verification
Information contained in documents you create, sign, or share through our Services

We process this information only with your explicit consent or when legally required to provide our electronic signature services.

Payment Data

We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe Atlas. You may find their privacy notice link(s) here: https://stripe.com/privacy

Social Media Login Data

We may provide you with the option to register with us using your existing social media account details, like your Facebook, X, or other social media account. If you choose to register in this way, we will collect certain profile information about you from the social media provider.

Document and Form Content

When you use our Services to create, upload, sign, or share forms, documents, and workflows, we collect and store:

The content of documents and forms
Metadata associated with documents (creation date, modification history, etc.)
Electronic signatures and signature-related data
Audit trails and timestamps for document activities
Information about recipients and signers
Workflow configurations and automation rules

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

To facilitate account creation and authentication
To deliver and facilitate delivery of services to the user
To enable electronic signature functionality
To verify identity and prevent fraud
To maintain document integrity and audit trails
To facilitate document and workflow sharing
To respond to user inquiries and offer support
To send administrative information
To request feedback
To send marketing and promotional communications
To deliver targeted advertising
To evaluate and improve our Services
To comply with legal obligations

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section.

We may need to share your personal information in the following situations:

Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Document Recipients: When you send a document for signature or share a form, we share the relevant information with the designated recipients.
Service Providers: We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work.
Legal Compliance: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your third-party social media account details. Where you choose to do this, we will receive certain profile information about you from your social media provider.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

For electronic signatures and signed documents, we are required by law to maintain records for specific periods (typically 7 years or longer depending on jurisdiction and document type).

When you delete your account:

Your personal profile information will be deleted or anonymized
Documents and forms you created will be retained for the legally required period if they contain electronic signatures
Documents without signatures may be deleted immediately upon request
Audit trails for signed documents will be maintained as required by law

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate security measures including:

Encryption of data in transit and at rest
Secure data centers with physical access controls
Regular security audits and penetration testing
Access controls and authentication mechanisms
Audit trails for all document and signature activities
Regular backups and disaster recovery procedures

For electronic signatures specifically, we maintain:

Tamper-evident seals on signed documents
Cryptographic hashing to ensure document integrity
Detailed audit trails with timestamps and IP addresses
Multi-factor authentication options
Secure certificate-based signature technology

9. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

If you are located in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

Withdrawing your consent

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@unlayered.ai or by post to:

ops0, Inc
San Francisco, CA