Legal
Privacy Notice
This notice describes the personal data ClinReady Sign processes as a service provider to the organizations that use it, and as a controller of our own account records. It is written by us, not by an auditor, and it describes the product as it runs today.
Dernière mise à jour : août 2026.
Who we are
ClinReady Sign is an electronic signature and document workflow product operated by its founding team. Written notices, privacy requests, and security reports go to support@clinready.com.
Data we process
Account data (name, work email, organization, role, authentication factors and login events); document data (files you upload, fields you place, and generated signed output); signer data (name, email, IP address, browser user agent, consent record, drawn or typed signature image and, where a workspace enables identity capture, a photograph of an identity document); billing data (plan, seat count and subscription state — card details are handled by our payment processor and never reach our servers); and operational logs.
Why we process it
To deliver documents for signature and produce a tamper-evident record of that transaction, to authenticate users and enforce workspace permissions, to bill subscriptions, to provide support, and to detect abuse. Document content is not used to train AI models. Where a workspace uses AI features, content is processed through a commercial gateway under terms that do not grant training rights, and only to produce that workspace's result.
Controller and processor roles
For content a customer organization uploads and the signers it invites, that organization is the controller and we act on its instructions. For our own account, billing, and support records we are the controller.
Retention and deletion
Documents and audit records are retained for as long as the workspace keeps them, subject to any retention policy the workspace configures. Deleting a document removes it from the application and schedules removal of the stored object. Closing an account removes workspace content within 30 days, except records we must keep for tax or fraud purposes.
Sharing
We do not sell personal data and we do not share it for advertising. We share it only with the subprocessors listed on our subprocessors page, and where we are legally compelled to.
Security
Controls in production today — and the ones we do not have — are listed in full on the security and compliance page. Please read the "not in place yet" list before placing regulated data in the product.
Your rights
Depending on where you live you may request access, correction, deletion, export, or restriction of your personal data. Signers should contact the organization that sent them the document first, since that organization controls the record; we will assist it in responding. Write to support@clinready.com and we will acknowledge within five business days.
Changes
Material changes will be announced in-app and dated here before they take effect.