Privacy Policy

Effective date: March 2026. Last updated: October 31, 2026.

SignArmor ("we," "our," or "the app") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller

The data controller for the personal data processed through the app is I12Y Limited (Michailidi 9, Limassol 3026, Cyprus), trading as SignArmor. For all privacy-related matters, you can contact us at support@signarmor.app.

1. Data We Collect

• Account information: Your email address, provided via Apple Sign-In (on iOS and on the web). If you choose Apple's "Hide My Email" option, we receive an Apple relay address instead of your personal email address.
• Waitlist: If you voluntarily submit your email address on our website (landing page or paywall) to be notified when SignArmor becomes available on your platform, we store that email address, the signup source, and the time of submission. We do not store your IP address.
• Contract text: Your contract file never leaves your device. Text is extracted locally on your device. Only that extracted text is transmitted for analysis, and only after you agree to it (see Section 2). We do not keep your contract text after the analysis is generated. The analysis report itself is stored, and it quotes the specific clauses it flags so that you can find them again later; those short excerpts are therefore retained as part of the report, and are deleted with it when you delete the report or your account.
• Analysis results: The AI-generated analysis of your contracts (safety scores, red flags, recommendations, etc.).
• Subscription status: Your current plan (free, single, basic, or pro) and related billing metadata managed by Apple.
• Usage data: Number of analyses performed, rate-limit counters, and timestamps.
• After you delete your account: A one-way coded form of your Apple sign-in ID, whether you used the free analysis, and the times of the analyses you started in the last 24 hours; and, for each in-app purchase, Apple's transaction number, the product and the time we processed it, no longer linked to your account (see Section 9).
• Crash diagnostics: If the app crashes, we collect diagnostic data via Sentry (app version, device model, and OS version). Personal-information collection in Sentry is disabled. We do not collect advertising identifiers, precise location, or browsing history.

Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

• Contract Performance (Art. 6(1)(b)): Processing your uploaded contracts is necessary to provide you with the analysis service you requested.
• Legitimate Interest (Art. 6(1)(f)): We process certain data (rate-limit counters, crash diagnostics, the record we keep after you delete your account so that the free analysis and usage limits cannot be reset, and the purchase records we keep after it so that a purchase cannot be credited twice) to ensure security and reliability and to prevent misuse of the service. We balance our interests against your rights and freedoms.
• Consent (Art. 6(1)(a)): Where we ask for it, we obtain your explicit consent before any optional processing. Submitting the waitlist form is such consent, given so that we can notify you when SignArmor becomes available on your platform. Before your first analysis, we also ask for your explicit consent to send the extracted contract text to OpenAI (see Section 2).

2. How AI Processes Your Documents

Text extraction happens entirely on your device: the original contract file is never uploaded. The extracted text is sent to OpenAI's API, which reviews it to find risky terms. OpenAI does not use data submitted through its API to train its models; per OpenAI's API data usage policies, OpenAI may keep API inputs for up to 30 days for abuse monitoring and then deletes them. Your contract text is never used to train AI models.

Personal details are replaced first. Before the text is sent, the app replaces personal details with labels such as [Email 1], [Name 1] or [Account 1]. The same detail always gets the same label, and the list of what each label stands for stays on your device and is not stored. Reports quote the labels, not the original details. The iOS app and the web app use the same rules, which replace:

• Contact and account details: email addresses, phone numbers, and bank account, card and ID numbers.
• The street line of an address: the house number and street, and an apartment or unit number written after them. The city, state and ZIP or postal code stay as written, because they show which law applies.
• Names in the places where a contract names a person: the parties (for example "between … and …", or a name followed by a role such as "Tenant"), lines that start with a label such as "Tenant:" or "Name:", signature lines, the name after a closing such as "Sincerely,", and a name after a title such as Mr., Ms. or Dr. A full name found in one of these places is then replaced everywhere in the text.

Company names, amounts, dates and the wording of the clauses stay as written.

The iOS app (iPhone and iPad) adds Apple's recognition on your device. It also finds names elsewhere in the text, including a first name or surname used on its own, and phone numbers and street lines written in other national formats.

The web app uses only the rules above. On the web, a name that appears only in the running text, outside the places listed above, is sent as written. So is a first name used on its own. A street line is replaced only when it has a house number, a street name and a word such as Street, Avenue or Road, so other forms, for example "Hauptstraße 5", are sent as written. A phone number is replaced when it starts with "+", follows a label such as "Phone:", or is written in the US and Canada format, for example (555) 123-4567. Other forms, for example 020 7946 0958 with no label, are sent as written.

Recognition is automatic and cannot catch everything on either platform, so some personal details, for example a name written in an unusual way, may still be sent.

We ask first. Before your first analysis, the app (on iOS and on the web) asks for your explicit consent to send the contract text to OpenAI. If you do not agree, no text is sent and no analysis is made. Your consent covers only the analyses you start yourself. You can withdraw it at any time by not starting new analyses or by deleting your account. Withdrawing consent does not affect text that was already sent.

3. Data Storage

• Analysis results are stored in a Supabase-hosted PostgreSQL database (cloud infrastructure) and are retained until you delete the analysis or your account.
• Deleted analyses: When you delete an analysis, we erase its content: the file name, contract type, score, summary, findings and the clauses they quote. We keep a minimal record of it without any content (date, status and how the analysis was paid for) until you delete your account, only so that usage limits keep working. You do not see this record in the app.
• Contract files are never uploaded to our servers. They stay on your device. Only the extracted text is transmitted for analysis. We do not store it after the analysis is generated; OpenAI may keep it for up to 30 days for abuse monitoring, as described above.
• Authentication data is managed by Supabase Auth with industry-standard security practices.

4. Third-Party Services

We use the following third-party services to operate SignArmor:

• Supabase: Database and authentication.
• OpenAI (API): AI-powered contract analysis.
• Apple: Sign-In with Apple for authentication and in-app purchase payment processing.
• Sentry: Crash and error diagnostics (app version, device model, OS version; no personal identifiers).

Each service has its own privacy policy. We recommend reviewing them for complete details.

5. International Data Transfers

Your data is primarily stored in the European Union: our database and backend are hosted in the eu-central-1 region. Contract text sent for AI analysis is processed by OpenAI in the United States. Such transfers rely on appropriate safeguards, including OpenAI's certifications and contractual commitments (Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework, as applicable).

6. Automated Analysis (GDPR Article 22)

The AI analysis is informational only and does not produce any legal or similarly significant automated decisions about you. A human contact is always available at support@signarmor.app for any questions about an analysis.

7. Your Rights (GDPR Articles 15-22)

If you are in the European Economic Area (EEA), you have the following rights:

• Right of access (Art. 15): Request a copy of all data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request permanent deletion of your account and all associated data, except the small record described in Section 9 that stops the free analysis and usage limits from being reset.
• Right to data portability (Art. 20): Export your data in a machine-readable JSON format. The export contains your profile, usage data and the analyses you have not deleted.
• Right to restrict processing (Art. 18): Request that we limit how we use your data.
• Right to object (Art. 21): Object to processing of your personal data.

8. How to Exercise Your Rights

9. Data Retention

• Analysis results are kept until you delete the analysis or your account.
• When you delete an analysis, its content is erased. A minimal record without content (date, status and how it was paid for) is kept until you delete your account, only so that usage limits keep working.
• Contract files are never uploaded to our servers, and we do not store extracted contract text after the analysis is generated (OpenAI may keep it for up to 30 days for abuse monitoring).
• When you delete your account, your profile and all your analyses are permanently erased. We keep a small record so that deleting and re-creating an account does not give a new free analysis or reset the usage limits. It holds a one-way coded form of your Apple sign-in ID (never your name, email address or contracts), whether you used the free analysis, and the times of the analyses you started in the last 24 hours. We cannot turn the code back into your Apple ID, but we recognize it if you sign in again with the same Apple ID. The times are erased within 2 days. The rest is erased 12 months after you delete your account, or within 2 days if you never used the free analysis. We also keep, for each in-app purchase you made, Apple's transaction number, the product and the time we processed it, for up to 12 months after that time and without any link to your account, so that the same purchase is never credited twice and Apple's later notices about it can still be matched.
• Waitlist entries are kept until you ask us to remove them. Write to support@signarmor.app at any time.

10. Children's Privacy

SignArmor is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately at support@signarmor.app.

11. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage, row-level security policies, JWT-based authentication (ES256), and rate limiting to protect your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are published on this page, and the "Last updated" date at the top of the page reflects when they took effect. Continued use of the app after that date constitutes acceptance of the updated policy.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information. You can do this directly in the app via Settings > Delete Account, or by emailing us. To prevent fraud, we keep two things after the deletion: a one-way coded form of your Apple sign-in ID with whether you used the free analysis, for 12 months, so that deleting and re-creating an account does not reset the free analysis; and Apple's transaction numbers of your in-app purchases, without any link to your account, for up to 12 months, so that a purchase cannot be credited twice (see Section 9).
• Right to Opt-Out: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. Every Apple ID gets one free analysis; not getting a second one after deleting and re-creating your account is the same rule, not a penalty for deleting.

To exercise these rights, use the in-app controls or contact us at support@signarmor.app. We will respond within 45 days.

13. Contact

For privacy-related questions or requests, contact us at:

support@signarmor.app