Privacy Policy

Signofly ("Signofly," "we," "us") is operated by Noera Solutions, an individual-owned business based in Indonesia. This policy explains what information we collect when you use Signofly, why we collect it, and the choices you have. It applies to everyone who visits our website or uses the Signofly application, regardless of where you're located.

Information we collect

Account information. When you sign up, we collect your name, email address, and password (stored as a salted hash by our authentication provider — we never see or store your password in plain text).

Workspace content. The approval requests, comments, custom field values, and file attachments you or your teammates create inside a workspace. This is the core data Signofly exists to store on your behalf.

Team & role information. Names, email addresses, and roles of people you invite into your workspace.

Billing information. If you upgrade to a paid plan, our payment processor (see "Third parties" below) collects and stores your payment card details directly — Signofly never receives or stores your full card number. We do receive your billing email, the plan you're on, and subscription status.

Usage & log data. Standard technical logs (IP address, timestamps, pages requested) generated by our hosting provider for security and abuse-prevention purposes — for example, detecting repeated failed login attempts. We do not use any third-party analytics or advertising trackers on Signofly today.

Cookies. We use one essential cookie to keep you signed in. It's required for the app to function and isn't used for advertising or cross-site tracking.

How we use this information

We use the information above to:

• Provide, operate, and maintain the Signofly application
• Authenticate you and keep your workspace data separated from other workspaces
• Send transactional emails you'd expect (approval notifications, invites, password resets, billing receipts)
• Process payments and manage subscriptions if you're on a paid plan
• Detect and prevent abuse, fraud, and security incidents
• Respond to support requests you send us

We do not sell your personal information, and we do not use your workspace content to train any machine learning model.

Legal basis for processing (EEA/UK/EU visitors)

If you're located in the European Economic Area, UK, or Switzerland, we process your personal data under these legal bases: performance of a contract (running the service you signed up for), legitimate interest (security, fraud prevention, improving the product), and legal obligation (tax and accounting records related to payments).

Third parties we share data with

We rely on a small number of specialist providers to run Signofly. We don't sell your data to anyone; the services below process it on our behalf, under their own security and privacy commitments:

• Supabase — database, authentication, and file storage
• Vercel — application hosting
• Resend — transactional email delivery
• Our payment processor — acts as Merchant of Record for paid subscriptions, collects payment details directly, and handles billing-related tax compliance

We may also disclose information if required by law, or to protect the rights, property, or safety of Signofly, our users, or the public.

International data transfers

Signofly is operated from Indonesia, and the providers listed above host infrastructure in multiple countries (commonly the United States and European Union). If you're located somewhere with stricter data-transfer rules than where your data is processed, your data may be transferred internationally as part of using Signofly.

How long we keep your data

We keep your account and workspace data for as long as your account is active. If you delete your account or a workspace is closed, we delete the associated data within a reasonable period, except where we're required to keep records for legal, tax, or fraud-prevention purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email us at support@signofly.com and we'll respond within a reasonable timeframe.

Children

Signofly is a business tool and isn't directed at, or intended for use by, anyone under 16.

Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, where appropriate, notify account admins by email.

Contact us

Questions about this policy or your data? Reach us at support@signofly.com.