Privacy
SignEnvoy measures its own product with its own database, and nothing else. This page says what is collected, why, and what is deliberately not stored. Formal policy documents arrive before general availability; the practices below are current.
This website
This site uses no analytics, no tracking, and sets no cookies. If you arrive through a link that carries campaign tags in the address, those tags are passed along when you follow a signup link, and the app stores them with your signup in a first-party cookie. Nothing about your visit here is recorded per visitor.
The rules the product follows
- First-party only. No third-party analytics anywhere, and none ever on the signing page. Nothing collected leaves SignEnvoy's own database.
- Aggregate by construction. Public-page views are counted as daily totals. There is no per-visitor record to leak, sell, or join against anything.
- No addresses or browser fingerprints in measurements. Product measurements reduce the browser to one of four coarse device classes (mobile, tablet, desktop, unknown) and discard the rest.
- Read internally. Measurements feed an internal operator script, not a dashboard product or an export feed.
What is stored, and why
| What | Why | Kept for |
|---|---|---|
| When your workspace first sealed a document | To see whether onboarding works | The life of the workspace |
| When an API key first succeeded | To see whether the developer quickstart works | The life of the key |
| Signing-step timestamps and a coarse device class per recipient | To find where signers get stuck | Until pruned; carries no identity beyond an internal reference |
| Decline reasons a signer chooses to give | To review what makes signing hard | Until pruned |
| Error counts by day and page | To see which failures people actually hit | Aggregate totals, kept indefinitely |
| Signup-page view counts by day | To see where people stop before signing up | Aggregate totals, kept indefinitely |
| Daily totals of muted notifications | To stop mailing people things they mute | Aggregate totals, kept indefinitely |
| Plan changes, with the reason | To understand upgrades and the monthly cap | Part of the account's audit record |
What is deliberately not stored
- No per-visitor or per-session records for public pages.
- No IP addresses or browser strings in any measurement.
- No cross-site identifiers, and no cookies beyond the product's own first-party attribution cookie, disclosed at signup.
- No signer identity in funnel measurements beyond an internal reference id.
- No third-party processors for any of the above.
The signing record is separate
A signed document's audit trail is legal evidence, not a measurement. It records each signer's IP address and browser inside the sealed system of record, and discloses exactly that on the document's Certificate of Completion. It is retained as part of the document's evidence, permanently.
Questions about any of this: support@signenvoy.com.