Skip to content
Signet

Privacy and data processing

Information about the service, data use and your rights.

Scope and purpose

Account, workspace and connected application information supports account management, license verification, support, service security and abuse review. Data use is limited to information needed for the relevant purpose.

Controller and legal basis

The Signet operator listed on this page is responsible for Signet account and service security processing. Creating an account requires an email address, display name and password. We process this information, account verification and license transactions to provide the service you request. We process necessary security records based on our legitimate interest in preventing attacks and misuse. We comply with applicable legal recordkeeping and reporting obligations. For data collected by a customer application from its own users, see that application’s privacy notice.

Information processed

Records may include email, display name, password hash, sessions, memberships, roles and licenses. Depending on application settings, device identifiers, device and account names, IP addresses and access events may also be processed. Security reviews may assess access behavior and application findings. Local window checks report matching tool categories rather than window titles or document contents.

Optional screenshots

Screenshots are disabled by default. When enabled, scope is explained and permission requested before capture. Supported applications allow choosing the app window or connected screens. Images may contain personal information and are accessible to authorized workspace owners and administrators for the relevant application. The choice lasts while the app runs and can be changed through supported privacy controls or by restarting it. No separate notice appears for every capture. Retention is configurable from 1–30 days, with a default of 7 days.

Protection and authorization

Passwords are stored as secure hashes. License keys, protected content and screenshots use encryption; service communications use protected transport. Permissions and session controls restrict access. No technical measure eliminates every security risk.

Providers and transfers

Signet is hosted in the Frankfurt region of Oracle Cloud. Recipient addresses and message contents are shared with Resend to deliver verification, password reset and invitation emails. Resend may process data in the United States. Its data processing addendum includes EU Standard Contractual Clauses for applicable transfers. You can contact us using the address on this page for information about transfer safeguards. External notifications configured for a workspace may send data to the receiving provider.

Retention and deletion

Records are retained for service delivery, security review and legal obligations. Defaults are 365 days for access events and 90 days for administrative records and notification queues; configuration may change these periods. Maintenance removes expired records. Backup copies follow the backup lifecycle.

Cookies and preferences

Session cookies support sign-in and the customer portal. Your language and theme choices are remembered in cookies or browser storage. Signet does not load advertising or third-party analytics trackers. You can change preferences in the interface or clear browser records. Blocking session cookies may affect sign-in.

Your rights

Use the email address on this page to request access, correction, deletion, restriction, portability or to object to processing. Where processing relies on consent, you can withdraw it. Security rules may automatically deny an access request. You can ask us to review a decision you believe is incorrect. You may lodge a complaint with the competent supervisory authority, including the Datenschutzbehörde in Austria.