Data Protection & Privacy

We collect and process the following personal data:

• Account information — your name and email address when you register, used to identify you as the campaign originator and send you reports.
• Campaign metadata — document titles and descriptions you create.
• Contact information — names, mobile phone numbers, and usernames of individuals you add to a campaign so they can be identified at verification.
• Acknowledgement records — when a recipient confirms they have read a document, we record their name, the timestamp, and their IP address to create a verifiable audit trail.

Under the GDPR (EU/UK), we process your personal data on the following legal bases:

• Legitimate interests (Art. 6(1)(f)) — to provide the document acknowledgement service you requested, maintain an audit trail for compliance and record-keeping, and prevent fraud or misuse of the verification system.
• Contract (Art. 6(1)(b)) — to deliver the service you signed up for, including sending reports and reminders to campaign originators.
• Consent (Art. 6(1)(a)) — for any optional analytics or marketing trackers (currently none active). You can withdraw consent at any time.

Under CCPA/CPRA (California), we process personal information for the business purposes described above.

When a recipient acknowledges a document, we record their IP address and the timestamp. This creates a verifiable, tamper-evident audit trail linking the acknowledgement to a specific network location and time. IP addresses are classified as personal data under GDPR and as identifiers under CCPA/CPRA. We retain this data only for as long as needed to serve the audit-trail purpose (see Retention below) and do not use it for tracking, profiling, or advertising.

We retain campaign data — including contacts, acknowledgement records, and audit trails — for as long as the campaign exists, plus a limited period after completion to allow for record-keeping and dispute resolution:

• Active campaigns — retained for the lifetime of the campaign.
• Completed or cancelled campaigns — retained for up to 2 years after completion or cancellation, after which they are automatically deleted.
• Archived campaigns — retained for up to 2 years after archiving, then automatically deleted.
• Deleted campaigns — when you delete a campaign, all associated contacts, acknowledgement records, and audit data are removed immediately.
• Account deletion — when you delete your account, all your campaigns, contacts, and associated data are permanently removed.

You can delete a campaign and all its data at any time from your dashboard. You can also delete individual contacts from a campaign at any time.

• Hosting infrastructure. We use the Base44 platform to host and secure your data. Base44 acts as a data processor under our instructions.
• Payment processing. Subscription payments are processed by Stripe. We do not store your card details — Stripe handles all payment data directly.
• No advertising trackers. We do not use Google Ads, Facebook Pixel, or any other advertising or analytics trackers that share your data with third parties for advertising purposes.
• No selling of data. We do not sell, rent, or share your personal data with third parties for commercial purposes.

• Encryption. All data is encrypted at rest within our secure database and file storage systems.
• Access control. Strict row-level security ensures only the authenticated account owner who created a campaign can access its records, contacts, and documents.
• Secure document access. Uploaded documents are stored in private, non-public storage and accessed only via time-limited signed URLs generated after identity verification.
• Identity verification. Recipients verify their identity before accessing any document. In Standard mode, they enter a shared access code plus their mobile number or username. In High assurance mode, each recipient uses a unique private link and personal access code.

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Opt-out of sale/sharing (CCPA) — we do not sell or share your data for cross-context advertising, so no opt-out is needed. This right is noted for completeness.

To exercise any of these rights, contact us at support@simplesignoff.com. We will respond within 30 days.

If you are a recipient (not a campaign originator) and wish to access or delete the personal data we hold about you — for example, your acknowledgement record or IP address — please contact the person who sent you the document link. They can delete your contact record from their campaign, which removes your data from our system. You can also contact us directly at support@simplesignoff.com and we will action your request.

Your data is processed by Base44, which may transfer data outside your country of residence. Where data is transferred outside the EU/UK, appropriate safeguards (such as Standard Contractual Clauses) are in place to ensure a level of data protection equivalent to that required under GDPR.

This service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page. The "last updated" date below indicates when the policy was last revised.

The data controller responsible for your personal data is A.I.R.Space Technologies Pty Ltd.

• Address: 294 Ocean Keys Boulevard, Clarkson WA, Australia
• Email: info@airspacetech.com.au

For any questions about this privacy policy or your data, contact us at support@simplesignoff.com or at info@airspacetech.com.au.