Privacy Policy

1. Introduction

UpVerify.net ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our electronic signature services. This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), CAN-SPAM Act, and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Create an account or register for our services
• Upload, send, or sign documents
• Contact us for support or inquiries
• Subscribe to our newsletter or marketing communications
• Participate in surveys, contests, or promotions

This information may include:

• Name, email address, phone number, and mailing address
• Account credentials (username and encrypted password)
• Payment information (processed securely through third-party providers)
• Documents, signatures, and related metadata
• Communication preferences and marketing consent
• Professional information (company name, job title)

2.2 Automatically Collected Information

• IP address, browser type, and operating system
• Device information and unique device identifiers
• Usage data, including pages visited and time spent
• Cookies and similar tracking technologies
• Location data (with your consent)
• Log files and analytics data

2.3 Third-Party Information

We may receive information about you from third parties, including business partners, marketing partners, and public databases, in accordance with applicable laws.

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Provide, operate, and maintain our electronic signature services
• Process and facilitate document signing workflows
• Authenticate users and prevent unauthorized access
• Process payments and manage billing
• Provide customer support and respond to inquiries

3.2 Communication

• Send transactional emails related to your account and documents
• Send marketing communications (with your explicit consent)
• Provide important service updates and security notifications
• Respond to your comments, questions, and support requests

3.3 Improvement and Analytics

• Analyze usage patterns to improve our services
• Conduct research and development
• Monitor and analyze trends and usage
• Detect, prevent, and address technical issues

3.4 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, abuse, and security threats
• Enforce our terms of service and policies
• Resolve disputes and protect our legal rights

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your personal data based on:

• Contract: Processing necessary to perform our services
• Consent: For marketing communications and optional features
• Legitimate Interest: For service improvement and security
• Legal Obligation: For compliance with applicable laws

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our platform, including:

• Cloud hosting and infrastructure providers (AWS, Google Cloud)
• Payment processors (Stripe, PayPal)
• Email service providers (Amazon SES, SendGrid)
• Analytics providers (Google Analytics)
• Customer support platforms
• Security and fraud prevention services

5.2 Legal Requirements

• To comply with applicable laws, regulations, or legal processes
• To respond to lawful requests from public authorities
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to appropriate safeguards.

5.4 Consent

We may share your information with your explicit consent or at your direction.

6. Data Security

We implement comprehensive security measures to protect your personal information:

• AES-256 encryption for data in transit and at rest
• SOC 2 Type II certified infrastructure and processes
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• Employee security training and background checks
• Incident response and breach notification procedures
• Data backup and disaster recovery systems

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

7.1 Types of Cookies

• Essential Cookies: Required for basic site functionality
• Performance Cookies: Help us analyze site usage and performance
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising (with consent)

7.2 Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect site functionality.

8. Email Marketing and Communications

8.1 Marketing Emails

We only send marketing emails to users who have explicitly opted in. Our marketing communications comply with CAN-SPAM Act, GDPR, and other applicable laws.

8.2 Transactional Emails

We send transactional emails related to your account, document status, and service updates. These are necessary for service provision and cannot be opted out of while using our services.

8.3 Unsubscribe

You can unsubscribe from marketing emails at any time by:

• Clicking the unsubscribe link in any marketing email
• Updating your preferences in your account settings
• Contacting us directly at contact@upverify.net

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records and audit trails

Specific retention periods:

• Account data: Retained while account is active plus 7 years after closure
• Document data: Retained per user settings or 7 years minimum for legal compliance
• Marketing data: Retained until consent is withdrawn
• Log data: Retained for 2 years for security and analytics purposes

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Binding Corporate Rules for intra-group transfers
• Certification schemes and codes of conduct

11. Your Rights and Choices

11.1 GDPR Rights (EU Users)

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request transfer of your data
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for consent-based processing

11.2 CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

11.3 How to Exercise Your Rights

To exercise your rights, contact us at privacy@upverify.net or use our online form. We will respond within the timeframes required by applicable law.

12. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notification to registered users
• Providing in-app notifications

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

14. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

15. Supervisory Authority

If you are located in the European Economic Area and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.