Privacy policy

This policy explains what personal data Safe AI Partners collects, why, how long we keep it and what rights you have.

Who is responsible

The controller of your personal data is SAFE AI Forever Intelligence Commons Inc., 2140 S Dupont Highway Camden, DE 19934. Contact us by post at that address.

What we collect

• Your name and email address.
• Your password. We never store it as you typed it, only as a hash made with Argon2.
• Your company, your title and your address, when a document asks for them.
• Your typed signature and the exact time you signed.
• Your IP address and a description of your device or browser, both when you sign and when you use the service (for example when you sign in).
• The text of the document you signed, as it read when you signed it.
• Administrators also have a TOTP secret for two-step sign-in, which we keep encrypted, and recovery codes, which we keep only as hashes.

Why we use it

• To provide the service: inviting you, letting you sign in, showing you your documents and letting you sign them.
• To keep proof of the agreements you signed, who signed them and when.
• For security: protecting accounts, spotting misuse and keeping an audit log of important actions.

Signed documents

Signed documents are PDFs stored encrypted on our own server. They can be reached only by logging in. For each signature we also keep a tamper-evident record, which lets us show later that a signed document hasn't been changed.

How long we keep it

Signed records are kept for 7 years after signing by default. After that an operator removes them, together with the stored PDF. The hash-only entries in the tamper-evident chain stay after removal. They contain no names or document text. They are what lets us show that the chain is still intact.

The audit log is different. Its entries can include an email address, an IP address and a description of the device or browser used (for example when a document is signed). They are kept beyond the 7 years and are not removed by the retention process.

[Note for the company's lawyer: after a signed record is removed, the audit log still shows who signed (by email), when, from which IP address and on which device. Confirm that keeping these for longer than 7 years is justified, or shorten how long they are kept.]

An account that has signed documents can be disabled but not deleted while those records are kept. A disabled partner can still ask us for a copy of their signed documents.

Who else handles your data

• Resend delivers our emails (invitations, password resets and the copy of a signed document you ask us to email you). When you ask for a copy by email, the PDF goes through Resend to reach you.
• Cloudflare provides the network connection and tunnel through which the service is reached, so your traffic passes through Cloudflare.
• The server that stores the data is hosted at [hosting provider and location to be confirmed].

We don't sell personal data, and we don't use it for advertising.

Your rights

Depending on where you live, you may have the right to:

• access: to get a copy of the personal data we hold about you;
• correction: to have inaccurate data put right;
• erasure: to ask us to delete your data;
• restriction: to ask us to limit how we use it;
• objection: to object to our use of it;
• portability: to receive your data in a portable format;
• to complain to a supervisory authority, such as your local data protection authority.

These rights have limits. In particular, we can't erase a signed record while we need it to establish, exercise or defend legal claims, which is why signed records are kept for the period above. To use a right, write to us at the address above.

Cookies

See the cookies page. We use only the cookies the service needs, and no analytics or tracking.

Changes

We may update this policy. The current version is the one on this page.