Privacy Policy

Information We Collect

• Account details, such as name, email address, company details, authentication information, and account settings.
• Signer details, such as signer names, email addresses, signing status, and signing-link delivery information.
• Document and signature data, including uploaded documents, completed documents, signature/initial fields, timestamps, and completion artifacts.
• Audit and security data, including audit events, IP address, device/browser information, user agent, token-related event metadata, and access logs where captured.
• Support and contact data, including messages submitted through support, sales, billing, or legal/privacy contact channels.
• Billing and customer data processed through Paddle as Merchant of Record, including subscription status, Paddle customer identifiers, transaction metadata, invoices, taxes, and refund/cancellation information where applicable.

How We Use Your Information

• To provide, operate, and maintain the OfferFlow platform.
• To process electronic signature requests and document workflows.
• To communicate with you regarding your account or service updates.
• To improve our services and develop new features.
• To ensure the security and integrity of our systems.

Third-Party Service Providers

• We use trusted service providers to operate OfferFlow, including Supabase for database, authentication, and storage infrastructure; Vercel for hosting; Postmark or another email provider for transactional email; and Paddle.com as Merchant of Record for paid subscriptions.
• Paddle handles payment processing, subscription billing, invoices, applicable taxes, and refunds for paid subscriptions.
• These providers may process personal information only as needed to provide their services, support security, comply with law, and operate the OfferFlow service.

Cookies, Local Storage, and Similar Technologies

• OfferFlow uses essential cookies and similar storage needed for authentication, session management, security, and core product functionality.
• The signing experience may use browser storage such as sessionStorage to preserve in-progress signer input in the same browser during a signing session.
• We do not currently use non-essential analytics or marketing cookies on the public site. If that changes, we will update this policy and implement any required consent controls before using those technologies.

Email Delivery and Open Tracking

Transactional emails, such as signing invitations, reminders, completion emails, and support messages, are sent through our email provider. Email delivery metadata may be processed to support delivery, bounce handling, abuse prevention, and troubleshooting. Open tracking may be enabled for operational delivery insight.

International Processing

OfferFlow is operated by a South African company and serves customers worldwide. Your information may be processed in South Africa and in other countries where we or our service providers operate. Those countries may have data protection laws that differ from your location.

Data Storage and Security

• We use industry-standard security measures to protect your information.
• Documents and data may be stored on secure cloud infrastructure.
• While we implement safeguards, no system can guarantee absolute security.

Data Retention

• We retain personal information and documents for as long as necessary to provide the service, maintain completion records, comply with legal, tax, billing, and audit obligations, resolve disputes, and protect service integrity.
• Completed documents, signatures, and audit records may need to be retained to preserve evidence of the signing workflow and document completion.
• Billing, tax, invoice, refund, and subscription records may be retained by Paddle and/or OfferFlow as required for legal and accounting purposes.
• Account deletion requests are reviewed against document, audit, signature, billing, tax, and support-retention obligations. Some records may be retained where deletion would compromise legal, audit, security, or billing records.

Your Rights

• Depending on your jurisdiction, you may have rights to request access to, correction of, deletion of, restriction of, objection to, or portability of your personal information.
• These rights may be subject to legal, audit, document-retention, billing, tax, security, and fraud-prevention limits.
• Requests may be submitted by contacting us at support@getofferflow.com.

Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, the updated version will be posted on this page with a revised 'Last Updated' date.

Contact

If you have questions about this Privacy Policy, please contact us at support@getofferflow.com.