Privacy Policy

We collect: (a) Account data: name, email address, and encrypted password when you register. (b) Documents: the PDF files you upload and the signers' data (name and email). (c) Signature data: IP address, approximate location (city and country, derived from the IP by our hosting provider), user-agent, browser, operating system, date and time of each signature, as part of the audit trail. This data is also recorded for signers who don't have a Firmiu account, and it appears on the document's certificate. (d) Usage data: pages visited and actions taken within the service. (e) Payment data: managed by Paddle; Firmiu does not store card numbers.

We use your information to: provide the electronic signature service and manage your account; send notifications about the status of your documents; email you, a few times a year, about important product improvements (you can unsubscribe with the link at the bottom of those emails and still get your document notices); generate audit trails that back each signature; improve the security and performance of the service; prevent fraud and abuse of the service, such as one person using several free plan accounts, for which we compare account data (such as names and the recipients of sends); comply with legal and regulatory obligations; process payments through Paddle.

Your documents are stored encrypted on secure cloud servers (Supabase on AWS infrastructure). We use encryption in transit via HTTPS/TLS and encryption at rest. Access to documents is controlled through Row Level Security (RLS) policies. Only you and authorized signers can access your documents.

We do not sell or rent your personal information to third parties. We share data only: with designated signers, to complete the document signing process; with service providers necessary to operate (Vercel for hosting the application, Supabase for the database and storage, Resend for emails, Paddle for payments and, only if you accept analytics cookies, Google Analytics); when required by law, court order, or competent authority.

You have the right to: access the personal data we hold about you; request correction of incorrect information; request deletion of your account and data; export your documents before deleting your account; object to the processing of your data in certain circumstances. To exercise these rights, write to us through the form at firmiu.com/en/contact.

Firmiu uses strictly necessary cookies to keep your session active and ensure the secure operation of the service. If you accept them in the cookie notice, we also use Google Analytics to measure traffic on public pages; it never loads in the dashboard or on signing pages, and declining doesn't remove any feature. We also measure visits and performance with Vercel Analytics, which uses no cookies. We do not use advertising cookies.

Documents, signatures and their audit trail are retained while your account is active, on every plan; archiving a document only hides it from your lists. PDFs you upload that are never sent are deleted automatically after 7 days. When you delete your account, your documents, signatures, contacts and account data are erased immediately; our provider's backups may keep them for up to 30 more days. Paddle separately keeps the billing records required by law.

Firmiu is not directed at persons under 18 years of age and we do not intentionally collect personal information from minors. If you believe a minor has provided personal information, let us know through the form at firmiu.com/en/contact to have it removed.

We may update this Privacy Policy periodically. We will notify you of material changes by email at least 15 days in advance. The date of the last update will always be visible at the top of this document.

For any inquiry, request, or complaint related to your privacy and personal data, write to us through the form at firmiu.com/en/contact. We will respond within a maximum of 5 business days.