SignAndGoPrivacy Policy
1. Introduction
This Privacy Policy explains how SignAndGo, owned by Fintech Development Pty Ltd, collects, uses, stores, and discloses personal information when you use our platform, including when you send documents for signing, view documents, or sign documents.
We are committed to handling personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles, where they apply.
2. What personal information we collect
We may collect the following categories of personal information.
Account and workspace information
- Name, email address, and organisation details
- User roles and permissions within a workspace
- Security settings, including multi factor authentication status where enabled
Document workflow and signing information
- Recipient and signer names, email addresses, and roles
- Document content uploaded to the service and related metadata such as file name and document hash
- Signing workflow data including envelope status, timestamps, and signing events
- Audit trail metadata such as IP address and user agent recorded during viewing and signing activity
Technical and usage information
- Log and diagnostic data generated when you use the service
- Device and browser information
- Cookies and similar technologies used for session security and platform functionality
3. How we collect personal information
We collect personal information when you:
- Create an account or are added to a workspace
- Upload documents, create envelopes, add recipients, or send signing requests
- View or sign documents using a secure signing link
- Contact support or communicate with us
- Use the service in a way that generates logs and audit events
4. Why we collect and use personal information
We use personal information to:
- Provide, operate, and maintain the service, including document workflow and signing
- Authenticate users, enforce access controls, and protect workspaces from unauthorised access
- Generate audit trails, certificates, and integrity records for signing activity
- Send service messages such as invitations, reminders, notifications, and support responses
- Monitor performance, troubleshoot issues, and improve reliability and security
- Improve AI-powered features (such as field detection and document layout assistance) using anonymised, aggregated metadata about field positions and document structure, which does not include the text content of your documents
- Comply with legal obligations and enforce our terms
5. Disclosure of personal information
We may disclose personal information:
- To workspace administrators and authorised users within your organisation, subject to your workspace settings
- To recipients and signers as part of a signing workflow
- To service providers that help us deliver the service, such as hosting, database, and email delivery providers
- AI features. Some features use AI services from trusted providers, including document summaries, contract analysis, template customisation, help writing messages, and our support chat. For these, the provider receives the text involved, which can include personal information such as names and addresses. We currently use AI services hosted in Australia, and we choose providers that don't use your information to train their models.
- Where required or authorised by law, including in response to lawful requests
We do not sell personal information.
6. Overseas disclosure
We store your data in Sydney, Australia. Some services run outside Australia; the New Zealand section of this policy lists them.
Where this occurs, we take reasonable steps to ensure overseas recipients handle personal information in a manner consistent with this Privacy Policy and applicable Australian privacy requirements.
7. Security
We implement technical and organisational measures designed to protect personal information, including access controls, encryption in transit, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Data retention
We retain personal information for as long as necessary to provide the service, meet legal and compliance obligations, resolve disputes, and enforce agreements. Some retention settings may be configurable per workspace where available. If you require specific retention and deletion requirements, contact us at sign@signandgo.com.au.
9. Access and correction
You may request access to, or correction of, personal information we hold about you by contacting sign@signandgo.com.au. We may need to verify your identity before responding.
10. Cookies
We use cookies to support authentication, security, and core platform functionality. Some cookies are essential. You can modify your browser settings to control cookies, but doing so may affect service functionality.
11. Complaints
If you have a privacy complaint, contact us at sign@signandgo.com.au with details. We will investigate and respond within a reasonable timeframe. If you are not satisfied, you may contact the Office of the Australian Information Commissioner.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version and update the effective date.
Your personal information and New Zealand's privacy law
New Zealand's Privacy Act 2020 applies to the personal information we handle for New Zealand customers. This section explains what that means for you and what you can ask of us. The rest of this policy applies to you too.
Where your personal information is held
We store your documents, records and files in Sydney, Australia, and your account details are held in Sydney too. Some services run outside Australia: sign-in (United States), payments (United States), AI assistants you choose to connect (their providers, in the United States or other countries), website bot protection (United States), website analytics in the SignAndGo app (United States), website fonts (worldwide), sending email (Australia or the United States), and support access (from Australia).
We're an Australian company. We protect what we hold in Australia under our own policies and Australia's Privacy Act 1988, which protects personal information in ways comparable to New Zealand's law. Other companies that handle personal information for us outside New Zealand must protect it under their contract with us.
Our New Zealand website runs no analytics; the SignAndGo app does, as listed above.
Who is responsible for what
For your own account details (your sign-in, profile, organisation, team members and billing), we are responsible for your personal information.
For what you put into SignAndGo, such as documents and envelopes, and for the people you share it with, we hold that information on your behalf and use it only to provide SignAndGo to you. You are responsible for having the right to add and share it. If someone asks us about information you control, we pass the request to you.
Seeing and correcting your personal information
You can ask to see the personal information we hold about you, or ask us to correct it, by writing to our privacy contact below. We'll confirm who you are first and answer within 20 working days. We don't charge for these requests. You can correct most of your account details yourself in Settings.
If something goes wrong
If a privacy breach is likely to cause serious harm, we'll tell the people affected and New Zealand's Privacy Commissioner as soon as we practicably can. If it affects information we hold on your behalf, we'll tell you without undue delay.
Questions and complaints
Write to our privacy contact with any question or complaint. We'll acknowledge it within 5 business days and answer within 20 working days. If you're not satisfied with our answer, you can complain to New Zealand's Office of the Privacy Commissioner at privacy.org.nz.
Privacy contact
Privacy officer: Andy Carey. Contact: privacy@support.myandgo.com.au.