Privacy Policy

This policy explains what HubSign Inc. ("HubSign") collects, why, and the choices you have. HubSign operates from New York, United States.

What we collect

• Account details: name, email address, password (stored as a hash) and your email preferences.
• Verification details you submit: company, website, role and how you plan to use HubSign.
• Proposals, contracts and invoices you create, and the names, companies and email addresses of the clients you add.
• Viewing records on shared proposals: the time of each visit, device type and how long each section was on screen.
• Signing records: signatures, and the time, IP address, browser and device of each view and signature.
• Payment records for invoices: amount, status and the reference from our payment processor (never full card numbers).
• If you connect a CRM (HubSpot, Salesforce or Pipedrive): the client and deal records needed for the sync.
• Messages you send through the contact form.

What we don't do

We do not sell personal information, we do not use advertising trackers, and we do not read or analyse the contents of your documents for marketing or to train models. Staff open a document only when you ask for help with it.

How we use it

To run the service, deliver proposals, signature requests, invoices and reminders, show senders when their proposals were viewed, build audit trails and certificates of completion, prevent fraud, answer support requests and, only with your consent, send product emails.

Sharing

A proposal or invoice is shared only with the clients you send it to. We use processors that host our database and storage, deliver email and process card and bank payments, under contracts that limit their use of the data. A list of sub-processors is available on request. We disclose data when the law requires.

Retention

Proposals, contracts and invoices stay in your account until you delete them or close the account. Completed documents and their audit trails may be kept for up to ten (10) years where signers or the law rely on them. Contact messages are kept for up to two (2) years.

Security and breach notification

Data is encrypted in transit and at rest, and access is limited to staff who need it. If a breach of private information occurs, we will notify affected people and regulators as required by the New York SHIELD Act (General Business Law § 899-aa) and other applicable laws.

Your rights

You can ask to access, correct, export or delete your personal data, and withdraw email consent at any time. Residents of other jurisdictions, including the EU and UK, have the rights their laws provide. Write to help@hubsign.net; we answer within 30 days.

Contact

HubSign Inc., 41 Bond Street, Floor 3, New York, NY 10012. Email help@hubsign.net, phone (646) 555-0193.