Privacy Policy

Information we collect

We collect account information such as your name, email address, organization, membership and sign-in records. We process configuration and activity records needed to operate keys, credentials, approval rules, devices, requests and audit history.

Stripe processes payment-card details. KeySigner receives billing identifiers, subscription status, plan, seat quantity and related transaction records, but not your full card number.

When public-site analytics or advertising measurement is configured, it stays off until you choose Allow analytics. If you consent, KeySigner can store campaign parameters and send page-view, click, checkout and subscription events to the configured providers. You can decline or change this choice under Privacy choices.

How we use information

We use information to authenticate you, provide the service, enforce configured authority, process billing, prevent abuse, investigate failures, support customers, improve the product and comply with law. We do not use an individual's key as a substitute for the multisig authority that an external service recognizes.

When we share information

We share information with service providers only as needed for their work, including authentication, payments, hosting, security, support, analytics and advertising measurement. We may also disclose information when required by law, to protect rights or safety, in a business transaction, or when you direct us to share it.

We do not sell personal information for money. Consent-based advertising measurement can be considered sharing for targeted advertising under some laws; declining analytics prevents those scripts from loading on the public site.

Keys and protected data

KeySigner processes public-key material, credential metadata, approval records and the information required for configured signing flows. Access-management authority does not automatically grant the ability to decrypt protected data. Your implementation and the external integration determine what data KeySigner can process.

Retention

We retain information while your account is active and as needed for security, audit, billing, dispute resolution and legal obligations. Retention can differ by record type. We delete or de-identify information when it is no longer needed, unless law or a legitimate security requirement requires retention.

Security

We use technical and organizational safeguards designed to protect information. No service can guarantee absolute security. Protect your keys and sign-in methods, use independent recovery where available, and contact us if you suspect unauthorized access.

Your choices and rights

You can decline public-site analytics, change the consent choice, update available account information and manage billing from the product. Depending on where you live, you may also have rights to access, correct, delete, restrict or obtain a copy of personal information, or object to certain processing.

To make a privacy request, email doug.lance@gmail.com. We may need to verify your identity and authority before completing a request.

Children

KeySigner is not directed to children under 13, and we do not knowingly collect their personal information.

Changes to this policy

We will post changes here and update the last-updated date. We will provide additional notice when a material change requires it.

Contact

Privacy questions and requests: doug.lance@gmail.com.