Privacy Policy

Last updated: August 18, 2026

This Privacy Policy explains how LimeSign ("LimeSign", "we", "us") collects, uses, discloses, and protects information when you use our electronic-signature platform, websites, and APIs (the "Service"). By using the Service, you agree to this Policy.

We act as a data controller for information about our account holders ("Senders"), and as a data processor for the documents and recipient information that Senders submit to be signed ("Signers").

1. Information we collect

Account information. Name, email address, hashed password, workspace details, and API keys (stored only as hashes).
Documents and signing data. Documents uploaded by Senders, and information about Signers a Sender adds — names, email addresses, and, where provided, phone numbers.
Signing and audit data. To create a legally-defensible record, we record events such as when a signing link is opened, consent to sign electronically, field values entered, signatures applied, IP address, device/browser (user agent), and timestamps.
Usage and delivery data. Log data, API usage, and email/SMS delivery events (sent, delivered, bounced, complaint).
Cookies. A single first-party session cookie to keep Senders logged in. We do not use advertising cookies.

2. How we use information

To provide the Service — prepare, send, and seal documents, and deliver signing links to Signers.
To create and store the audit trail and Certificate of Completion for each envelope.
To secure the Service, prevent abuse, and troubleshoot delivery.
To communicate with account holders about their account and the Service.
To comply with legal obligations.

3. Legal bases

Where the GDPR or similar laws apply, we process personal data to perform our contract with the Sender, on the basis of our legitimate interests (operating and securing the Service), to comply with legal obligations, and — where required — with consent. Signers consent to sign electronically before completing a signature.

4. How we share information

With the parties to an envelope. Completed documents and the Certificate of Completion are shared among the Sender and the Signers of that envelope.
Service providers (subprocessors). We use trusted infrastructure providers to run the Service, including Amazon Web Services (hosting, storage, and email delivery). Providers act on our instructions under contract.
Legal. We may disclose information to comply with law, enforce our terms, or protect rights and safety.
Business transfers. Information may be transferred as part of a merger, acquisition, or sale of assets.

We do not sell personal information.

5. Data retention

We retain account information for as long as your account is active. Documents, signing data, and audit records are retained according to the Sender's configuration and to preserve the legal record of completed signatures, unless deletion is requested and permitted by law. Delivery logs are retained for a limited period for operational purposes.

6. Security

We protect information with encryption in transit (TLS) and at rest, access controls, single-use signing links, and hashed storage of credentials and API keys. No system is perfectly secure, but we work to protect your data and to notify you of incidents as required by law.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Senders can manage much of their data in the dashboard. Signers should contact the Sender who initiated a document, or contact us and we will assist or route the request appropriately. To exercise your rights, email privacy@limebaseapp.com.

8. International transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

9. Children

The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, additional notice.

11. Contact us

Questions about this Policy? Email privacy@limebaseapp.com.

This Privacy Policy is provided as a general template and does not constitute legal advice. Please have it reviewed by qualified legal counsel before relying on it.