The operator
AutoSignature operates autosignature.com and the email signature management software described on it. The terms of service cover the agreement itself. For questions about this policy or about your data, write to support@autosignature.com.
What we collect
On this website
- The email address you enter when you create an account, and the confirmation state of that address.
- The options you configured in the signature builder before signing up, so we can pick up where you left off.
- Technical data that arrives with any web request: IP address, browser and operating system, the page you came from, and the campaign parameters in the link you followed.
- Nothing else. There is no contact form on this site, and we do not ask for a phone number or a company name to let you in.
In the product, when your company connects a tenant
- Directory fields needed to fill a signature template: name, job title, department, phone numbers, office, photo and pronouns.
- Which mailboxes belong to which group, so the right template reaches the right person.
- A record of administrative actions: who deployed which template set to which group and when.
- We do not read, store or route the content of your email. Signatures are written to mailboxes, messages are not processed by us.
The purposes, one by one
- To create and confirm your account, which is why we send a code to the address you gave.
- To provide the service: rendering templates, filling them with directory data and deploying them to the mailboxes your administrator chose.
- To keep the service secure and to prevent abuse, which is why sign-up requests are rate limited per address and per network.
- To bill for a paid plan and to meet our accounting obligations.
- To send service messages about your account. Marketing email is separate and you choose whether to receive it.
Where your company is our customer, your company decides what directory data enters the product and for what purpose. In that relationship your company is the controller of that data and we process it on their instructions, under a data processing agreement.
Retention
- Account email addresses: while the account exists, and for the period our accounting obligations require after it closes.
- Directory data: while your company's tenant is connected. Disconnecting removes it from our systems.
- Rollout history: for the period included in your plan, which is 30 days, 12 months, 24 months or a period agreed in an Enterprise contract.
- Technical logs: a short period for security and troubleshooting, then deleted.
Who else is involved
Processors
We use a small number of service providers to run the service: hosting and databases, email delivery for the confirmation and service messages, and payment processing for paid plans. Each of them processes data on our instructions and only as far as their part of the service requires. Enterprise customers receive the current sub-processor list as part of their agreement.
Transfers and residency
Data is stored in the region attached to your account. Enterprise customers choose that region in their contract. Where data moves between regions, it does so under the safeguards the law requires.
What you can ask for
- A copy of the personal data we hold about you.
- Correction of data that is wrong, or deletion of data we no longer need.
- Restriction of processing, or objection to it, where the law gives you that right.
- Withdrawal of consent where processing rests on consent, which does not affect what happened before you withdrew it.
- A complaint to your local data protection authority, if you think we got this wrong.
Write to support@autosignature.com and we answer within the period the law allows, usually much sooner. If your data reached us through your employer's tenant, we may need to pass your request to them, because they decide what happens to it.
What this site stores in your browser
This site uses the cookies needed to keep a session, to remember what you built in the builder and to keep forms secure. We do not use advertising cookies and we do not sell data to anyone. If that changes, this page changes with it and you are asked before anything non-essential is set.
Updates to this policy
When this policy changes materially, the date at the top changes and account holders are told by email before the change takes effect.