Privacy Policy

Last updated: September 30, 2026

1. Who we are

Sigvera operates sigvera.com, its API and mobile apps. For privacy questions, write to support@sigvera.com.

2. What we collect

• Account information: your name, email address and a one-way hash of your password. Never the password itself.
• Documents: the images or PDFs you upload, the description you give them, and technical details such as file size, type and a fingerprint of the file.
• Ink codes: each code we generate for you, when it was generated, used or expired, and which document it was used on.
• Verification records: when a code is verified, we record the time, the result and the verifier's network address and browser type, so abuse can be detected and you can see who checked your document.
• Billing: your plan, invoices and Stripe customer reference. Card details go directly to Stripe and are never stored by us.
• Technical logs: request logs and error reports needed to keep the Service secure and working, retained for a limited time.

3. How we use it

To provide and secure the Service, to verify codes for whoever presents them, to bill you, to send the emails the Service needs (confirmation, password reset, receipts, payment problems, and notices about your account), to support you, and to meet our legal obligations. We do not send marketing email without your consent.

4. Who we share it with

Only the providers we need to run the Service, each bound by contract to use the data solely for that purpose:

• Microsoft Azure (United States) hosts our applications, database and file storage, and collects application telemetry.
• Stripe processes payments and stores your payment method.
• Fastmail delivers the emails we send you.

Beyond that, we disclose data only when the law requires it, to protect our rights or users, or with your direction. Anyone verifying an ink code sees only the verification result and limited document details, never the document image or your contact details.

5. How long we keep it

• Account and document data: until you delete the document or your account.
• Verification records: for as long as the related code exists, because they are part of the evidence the Service provides.
• Billing records: as long as tax and accounting law requires.
• Technical logs: typically 30 days.

When you delete your account, your documents, codes, requests and sessions are erased and your account record is anonymized. Backups that still contain the data are overwritten on their normal cycle, within 14 days.

6. Your choices and rights

From Settings you can update your name, change your password, sign out of all devices, and delete your account. Depending on where you live you may also have rights to access, correct, export, restrict or object to our use of your data, and to complain to a supervisory authority. To exercise them, email support@sigvera.com; we answer within 30 days.

7. Cookies

We use only the cookies the Service needs: a sign-in cookie that keeps you logged in and a security token that protects forms from forgery. We do not use advertising or cross-site tracking cookies.

8. Security

Data is encrypted in transit and at rest. Passwords are stored as salted, iterated hashes. Administrative access requires multi-factor authentication and is logged. Read more on our Security page. No system is perfectly secure; if we learn of a breach affecting your data we will inform you and the relevant authorities as the law requires.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

If we change this policy in a way that affects you materially, we will notify you by email or in the Service before the change takes effect.