Legal
Privacy policy
Last updated: [date]
This policy explains how [legal entity name] ("we", "us") collects and uses personal information when you visit this website or use Team EditSign (the "Service").
1. Who is responsible
For information about the organizations that sign up and the people who administer them, we act as[controller]. For information processed on behalf of a customer organization within the Service, the customer is the [controller] and we act as [processor].[Confirm roles and add a data processing agreement reference.]
2. Information we collect
Account and organization information
- The email address, name and password of the person who signs up and creates the organization.
- Organization details, plan and subscription status.
- For users who sign in through Microsoft Teams: profile information provided by Microsoft Entra ID, such as name, email address and directory identifiers.
Billing information
Payments are processed by Stripe. Card details are entered with and stored by Stripe; we receive limited information such as the payment status and the last digits of the card. [Confirm.]
Documents
Documents open from and save to your organization's Microsoft 365 storage (such as OneDrive and Teams) or your own computer.[Describe what document data, if any, is processed or stored by the Service, including for documents sent for signature, and for how long.]
E-signature information
When a document is sent for signature we process recipient names and email addresses, the signatures and field values they provide, and signing events (such as sent, viewed, signed or declined) for the audit trail and certificate of completion.[List any further data, e.g. IP addresses or user agents.]
Activity log
The Service records user actions in an append-only activity log so that tenant owners can review activity in their organization.[Describe retention.]
This website
This website does not use third-party trackers or analytics scripts. [Update if this changes; describe server logs if applicable.]
3. How we use information
- To provide, secure and support the Service.
- To process payments and manage subscriptions.
- To send service emails, such as account verification and password resets.
- To comply with legal obligations. [Add legal bases where required.]
4. Sharing
We share information with service providers that help us run the Service, such as Microsoft (identity and storage, under your organization's own agreement) and Stripe (payments). [List sub-processors and hosting provider.] We do not sell personal information.
5. International transfers
[Describe where data is processed and the transfer mechanisms used.]
6. Retention
[Describe how long each category of information is kept.]
7. Your rights
Depending on where you live, you may have rights to access, correct, delete or export your personal information, or to object to certain processing. If your account is managed by your organization, please contact your organization's administrator first.[Adjust for applicable law.]
8. Security
We use technical and organizational measures to protect information. See our security page for details about how the Service works.
9. Changes
We may update this policy. We will post the new version here and update the date above.
10. Contact
Questions about this policy: adamw@teameditsign.com, or[postal address].