Privacy Policy

1. Controller

The controller responsible for data processing under the GDPR (DSGVO) is:

solid native GmbH

Paulsborner Str. 85

10709 Berlin, Germany

Email: support@mailsignoff.com

2. What we process

• Account & sign-in. Your email address, used for passwordless magic-link sign-in.
• Google Workspace connection. When you connect your workspace, we store OAuth tokens (encrypted at rest) and sync your directory users (name, email, job title, department, photo) to render and deploy signatures. We act on the Google account you authorise.
• Email tracking. When an email carrying a tracked signature is opened or a banner is clicked, we record the event. Recipient email addresses are stored only as a SHA-256 hash, IP addresses are anonymised (last octet / interface bits removed, /24 for IPv4, /48 for IPv6), and user agents are hashed. We do not store recipient email addresses or full IPs in plaintext.
• Landing pages & leads. Views and conversions on hosted landing pages are recorded with the same anonymisation. If a visitor submits a contact form, we store the email address and message they provide, together with their explicit consent.

3. Legal bases

We process account and workspace data to perform our contract with you (Art. 6(1)(b) GDPR), tracking and analytics on the basis of our legitimate interest in measuring signature performance (Art. 6(1)(f) GDPR), and contact-form submissions on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

4. Hosting & sub-processors

Our application and databases are hosted on EU-based infrastructure. We use the following sub-processors; a current list forms part of your data processing agreement (AVV):

Where a sub-processor is located outside the EU/EEA, transfers are safeguarded by EU Standard Contractual Clauses. Providers marked USA only receive data for the specific feature named — the conversational assistant is only used on conversation-type landing pages, and company enrichment is only active when explicitly enabled.

5. Retention

Account and workspace data are retained for the life of your account and deleted when you close it. Tracking and landing-page events are retained for as long as needed to provide analytics. Contact-form leads are retained until you or the account owner delete them.

6. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). You may withdraw consent at any time with effect for the future. To exercise any of these rights, contact support@mailsignoff.com. You also have the right to lodge a complaint with a supervisory authority — for our seat, the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).