SendbyLaw Privacy Policy

Version 1.0 · Document hash: 67ad89c133f5…

SEND BY LAW — PRIVACY POLICY
Version 1.0
Effective date: 15 August 2026

1. INTRODUCTION
This Privacy Policy explains how SendbyLaw ("we", "us") processes personal data when you use our platform. This policy is separate from any NDA between users of the platform.

2. DATA WE PROCESS
Depending on how you use SendbyLaw, we may process:
- Account data: name, email, password (stored hashed), country, city, company/entity details;
- NDA workflow data: sender and recipient names, email addresses, locations, signatures;
- Optional saved signature appearance: a drawing you choose to store on your account or this device so you can apply it to later NDAs. This is a stamp, not a completed signature. Each NDA still requires a fresh apply action and review confirmation;
- Technical data: IP address, browser/device information, timestamps, document hashes;
- Payment data: processed by our payment provider (e.g. Stripe); we do not store full card numbers;
- Uploaded content: files you choose to protect behind an NDA (Pro feature).

3. PURPOSES
We process personal data to:
- provide and secure the service;
- authenticate users and maintain accounts;
- generate, present, and store NDAs and signing evidence;
- maintain audit trails of document access and signatures;
- process subscriptions and comply with legal obligations.

4. LEGAL BASES (SWITZERLAND / FADP)
We process data based on contract performance, legitimate interests (security, fraud prevention, service improvement), and legal obligations. Where consent is required, we collect it separately (e.g. acceptance of these policies at registration).

5. RETENTION
We retain account and audit data for as long as your account is active and as needed for legal compliance, dispute resolution, and evidence of acceptance/signing. You may request deletion subject to our legal retention obligations.

6. SHARING
We may share data with:
- infrastructure and payment providers necessary to operate the service;
- authorities when required by law.

We do not sell your personal data.

7. SECURITY
We implement technical and organizational measures including encryption in transit, access controls, and audit logging. No system is completely secure; please use strong passwords.

8. YOUR RIGHTS
Under applicable data protection law (including the Swiss Federal Act on Data Protection), you may have rights to access, rectify, delete, or restrict processing of your data, and to object to certain processing. Contact: privacy@sendbylaw.com

9. INTERNATIONAL TRANSFERS
If data is transferred outside Switzerland, we ensure appropriate safeguards as required by applicable law.

10. CHANGES
We may update this policy. Material changes will be published with a new version number.

11. CONTACT
Data controller: SendbyLaw
Email: privacy@sendbylaw.com

---

By creating an account, you confirm that you have read this Privacy Policy.