Privacy Policy

This policy explains what Signcodify Inc. ("Signcodify") collects, why, and the choices you have. Primary operations are run from New York, United States; EU sub-processors are available on request for customers who need data to stay in the EU.

What we collect

• Account details: name, email address, password (stored as a hash) and your email preferences.
• Verification details you submit: company, website, role and how your team plans to use Signcodify.
• Workspace content: spaces, pages, versions, changelog entries, OpenAPI files and the names, emails and roles of members you invite.
• Git integration data: the repositories and branches you connect, and the commit and pull request metadata needed for sync.
• Reader analytics on your published docs: page views, search queries (including searches with no result) and questions asked of AI search, without cross-site identifiers.
• Technical records: IP address, browser and device for security logs and abuse prevention.
• Messages you send through the contact form.

What we don't collect or do

We do not sell personal information, we do not use advertising trackers, and we do not use your documentation to train AI models shared with other customers. We never see your Git provider password; integrations use tokens you can revoke. Staff open your workspace only when you ask for help or when the law requires it.

How we use it

To run the service: render and host your docs, keep your repository in sync, build search indexes, answer AI search questions with links to sources, send invitations and alerts, prevent fraud, answer support requests and, only with your consent, send optional service updates.

Sharing and sub-processors

Published pages are visible to the readers you choose; private pages only to members with access. We use processors that host our database and storage, deliver email, serve published sites and run AI models for search, under contracts that limit their use of the data and forbid training on it. A current list of sub-processors, including EU-hosted options, is available on request. We disclose data when the law requires.

Retention

Workspace content stays in your account until you delete it or close the account, then is removed from active systems after a thirty (30) day export window. Backups roll off within 35 days. Account, billing and security records are kept for up to ten (10) years where the law or a dispute requires it. Reader analytics are kept for 13 months. Contact messages are kept for up to two (2) years.

Security and data breach notification

Data is encrypted in transit and at rest, and access is limited to staff who need it. If a breach of private information occurs, we will notify affected people and regulators as required by the New York SHIELD Act (General Business Law § 899-aa) and other applicable laws, and tell affected workspace owners what happened and what we are doing about it.

Your rights

You can ask to access, correct, export (portability) or delete your personal data, and withdraw email consent at any time. Residents of other jurisdictions, including the EU and UK under the GDPR, have the rights their laws provide. If your data is in a workspace run by your employer, we will pass your request to that workspace owner. Write to help@signcodify.com; we answer within 30 days.

Contact

Signcodify Inc., 212 Lafayette Street, Floor 5, New York, NY 10012. Email help@signcodify.com, phone (332) 555-0176.