This policy covers two kinds of data: what we hold about you, our customer, and what we process for you about your app's users.

About you

Your name, email, company, GSTIN and billing details, to run your account and send invoices.
How you use the dashboard and the API, to keep it working and to answer your support questions.
The answers on the sign-up form, to set up your account.

We do not sell this data and do not share it except with the services that run SignOps: Cloudflare for hosting, Amazon Web Services for email, and our payment provider for billing.

About your users

For your users, you are the data fiduciary under India's Digital Personal Data Protection Act, 2023, and SignOps is your data processor. We process their data on your instructions and only to provide SignOps to you:

The user ids you send, device push tokens and platforms, and when each device was last seen.
Email addresses you send codes to, and the hashes of those codes.
Public keys for Approve and passkeys. Never private keys, faces or fingerprints.
Logs of messages, approvals and codes, kept for the periods on the security page.

Their data is used only to send what you ask SignOps to send and to check what you ask it to check. It is not used to contact them, for our own purposes or for training.

Cookies

This site sets no tracking cookies. The dashboard sets one cookie to keep you signed in.

Your rights

You can see, correct or delete your account data from Settings or by emailing us. Your users' requests about their data go to you, and our API lets you delete a user and everything held under their id in one call.

Contact

Privacy questions: privacy@signops.dev. Everything else: hello@signops.dev.