Privacy Policy

1. Introduction

SignaHub ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using SignaHub, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Account Information: Name, email address, password, company name
• Profile Information: Job title, department, phone numbers, profile photo
• Business Card Information: Contact details, social media links, company information
• Payment Information: Credit card details (processed securely through Stripe)
• Content: Email signatures, images, banners, and other content you create

2.2 Automatically Collected Information

When you use SignaHub, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, error logs
• Location Data: Approximate location based on IP address (for analytics)
• Analytics Data: Signature views, QR code scans, link clicks, NFC taps

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized features and content

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Generate email signatures and digital business cards
• Process payments and billing
• Provide customer support
• Send service-related notifications

3.2 Analytics and Improvement

• Track signature and business card performance
• Analyze user behavior and preferences
• Improve Service functionality and user experience
• Develop new features

3.3 Communication

• Send important updates about the Service
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Notify you of changes to terms or policies

3.4 Legal Compliance

• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and property
• Prevent fraud and abuse

4. How We Share Your Information

4.1 Within Your Organization

If you're part of an organization using SignaHub, certain information (such as contact details and signatures) may be visible to administrators and other users within your organization.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment Processing: Stripe (for payment processing)
• Cloud Hosting: Vercel (for hosting and infrastructure)
• Database: MongoDB (for data storage)
• File Storage: Vercel Blob Storage (for images and files)
• Geolocation: MaxMind (for IP-based location data)

4.3 Public Information

When you share your digital business card via QR code or NFC, the contact information you've included becomes publicly accessible to anyone who scans the code.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal requests from government authorities
• Court orders or subpoenas
• Protection of our legal rights
• Prevention of fraud or illegal activity

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted password storage (bcrypt hashing)
• Secure session management with JWT tokens
• Regular security audits and updates
• Access controls and authentication
• Secure payment processing (PCI-DSS compliant via Stripe)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal purposes.

7. Your Rights and Choices

7.1 Access and Correction

You can access and update your personal information at any time through your account settings.

7.2 Data Deletion

You can request deletion of your account and associated data by contacting us at privacy@signahub.app.

7.3 Data Portability

You can export your data in common formats (CSV, JSON) through the Service or by requesting a data export.

7.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email or by adjusting your account preferences.

7.5 Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

8. Children's Privacy

SignaHub is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place to protect your information.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@signahub.app
Legal Email: legal@signahub.app
Website: www.signahub.app