Privacy Policy

Last updated: 22 October 2026

1. Controller

QYREON SRL is the data controller for the personal data described here. Contact: support@getsignpdf.com.

2. What stays on your computer

The PDF files you open, the stamps you design, your signature image and your settings are stored only on your computer. We never receive them.

3. What we process

• Account data — your email address and, if you sign in with Google, your Google account identifier; a password if you choose email sign-in (stored only as a secure hash by our authentication provider). Purpose: to provide your account (contract).
• Subscription data — your plan, its status and renewal date, and Stripe customer and subscription identifiers. Purpose: to provide the paid service and billing (contract, legal obligations).
• Device data — a one-way hash derived from your Windows installation and your computer’s name, plus when it was last used. Purpose: to apply the number of computers included in your plan (contract, legitimate interest in preventing misuse).
• Payment data — card and billing details are collected and processed by Stripe / Link as merchant of record; we do not see or store your full card number.
• Messages — what you send us through the contact form or by email. Purpose: to answer you (legitimate interest / pre-contract).
• Technical logs — short-lived server logs (such as IP address and time) kept by our hosting providers for security and troubleshooting. The country a visit comes from is also used to show the site in the right language; we don’t store it.

4. Service providers

• Google Firebase (Google Ireland / Google LLC) — sign-in, account and subscription database, server functions; data stored in the EU.
• Stripe / Link (Stripe Payments Europe / Stripe, Inc.) — payments, taxes, receipts and invoices, as merchant of record.
• Cloudflare — hosting of this website, email forwarding and file downloads.

Some providers may process data outside the European Economic Area; such transfers are covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

5. How long we keep data

Account and device data: while your account exists and up to 30 days after you delete it. Billing records: as long as tax law requires (in Romania, generally 10 years). Messages: up to 2 years after the conversation ends.

6. Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability or object to processing, and withdraw consent where processing relies on it. You can delete your account yourself at any time in My account. For anything else, write to support@getsignpdf.com. You can also complain to the Romanian data protection authority (ANSPDCP, www.dataprotection.ro) or the authority in your country.

7. Cookies

This website uses no advertising or analytics cookies. See the Cookie Policy for details.

8. Changes

We will update this page when our processing changes and show the new date at the top.