Privacy Policy

This Privacy Policy explains how PocketESign processes personal information when people visit the website, create or use a PocketESign account, send documents for signature, receive a signing request, contact support, or otherwise use the service.

1. Who operates PocketESign

PocketESign is operated by PocketESign. Registered or business address: Badalona. Country: Spain. Privacy and legal contact: support@pocketesign.com.

2. Our roles

For account administration, security, website operation, support and our own business records, PocketESign generally determines why and how personal information is processed. For documents and signer information uploaded or submitted by a PocketESign customer, the customer generally determines the purpose of the processing and PocketESign processes that information to provide the signing service. The exact legal role can vary according to the circumstances and applicable law.

3. Information we process

• Account information: name, email address, login and account metadata.
• Customer and signer information: names, email addresses, recipient order and document workflow information.
• Documents and signature data: the content of documents sent for signature, form-field values, electronic signatures or initials, completion certificates and audit information.
• Security and audit information: IP address, timestamps, browser or device information, signing events, webhook events and records used to protect the integrity of a transaction.
• Support information: messages and information you provide when contacting us.
• Usage and analytics information: information about visits and use of the website where analytics is enabled. Optional analytics must be handled in accordance with applicable consent requirements.
• Billing information: paid credit-pack purchases are processed through Stripe. PocketESign receives transaction and billing metadata needed to reconcile purchases, but does not store full payment-card numbers on its own servers.

4. How documents are handled

The PocketESign WordPress application does not retain the original uploaded source PDF in the WordPress Media Library as part of the current signing workflow. The document is transmitted to our specialist e-signature infrastructure provider so it can be rendered, signed, audited and made available as a completed document. PocketESign stores workflow metadata in its own application database, including provider identifiers, recipient metadata and document status.

Our current e-signature infrastructure provider is Firma.dev (1600 Holdings LLC). According to Firma.dev's current Data Processing Agreement, it processes names and email addresses, signature data, IP addresses, timestamps, document content and audit-trail information to provide the signing service.

5. Why we use personal information

Depending on the context and applicable law, we process information to provide and secure the service, perform our agreement with customers, respond to support requests, maintain audit and transaction records, prevent abuse and fraud, comply with legal obligations, improve the product and, where required, act on consent.

6. Recipients of information and subprocessors

We use service providers where necessary to operate PocketESign. These may include e-signature infrastructure, hosting, email delivery, security, analytics and payment providers. Our current material service-provider disclosures are maintained on the Subprocessors page.

Firma.dev states that its primary document and signer infrastructure is hosted in the European Union and that it uses additional subprocessors for infrastructure, database and transactional-email services. Details can change, so customers should review our Subprocessors page for the current list.

7. International transfers

Personal information may be processed in countries other than the country in which a user is located. Where transfer safeguards are required, PocketESign and its providers will use mechanisms appropriate to the applicable law, such as adequacy decisions, contractual safeguards or Standard Contractual Clauses where relevant.

8. Retention and deletion

PocketESign retains account and workflow metadata for as long as reasonably necessary to provide the service, maintain security and auditability, meet legal obligations and resolve disputes. PocketESign uses a reviewed retention and deletion workflow for account data and provider-side signing records.

Firma.dev currently states that documents are retained until deletion is requested, subject to records that may need to be retained for legal or audit reasons. PocketESign provides a customer deletion-request workflow and an internal operational queue so reviewed requests can be propagated to the signing-infrastructure layer where appropriate.

9. Your choices and rights

Depending on where you live and which law applies, you may have rights to request access, correction, deletion, portability or restriction of personal information, to object to certain processing, to withdraw consent where processing is based on consent, or to complain to a supervisory authority. Certain U.S. state laws may provide additional rights regarding personal information. PocketESign does not intend to sell personal information or use signer data for cross-context behavioral advertising.

When PocketESign processes signer information on behalf of a customer, we may direct the request to that customer or assist the customer in responding, as appropriate.

10. Cookies and analytics

PocketESign uses cookies or similar technologies that are necessary for WordPress login, security and application operation. Optional analytics may also be used. See our Cookie Policy. Where consent is legally required for optional cookies, they should not be activated until the required choice has been obtained.

11. Security

We use technical and organizational measures intended to protect account and signing data. No online service can guarantee absolute security. More information about the product architecture is available on our Security page.

12. Children

PocketESign is not intended for children. Customers must not use the service to collect personal information from children in violation of applicable law.

13. Changes to this policy

We may update this policy as the product, providers or legal requirements change. The date at the top of the page identifies the current version.

14. Contact

Privacy questions may be sent to support@pocketesign.com.