Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how SimplySigned, LLC, a Massachusetts limited liability company ("SimplySigned", "we", "us", or "our") handles information when you visit simplysigned.co (the "Site") or use the SimplySigned application at dashboard.simplysigned.app and related services (the "App"). Together, the Site and the App are the "Services."

In short: we collect information to run the Services, some of our service providers collect information directly from your device, we never sell personal information, and anyone can ask us to delete their data.

1. Who this Policy covers

SimplySigned is a platform that helps businesses ("Customers") capture leads, create contracts and other agreements (such as service agreements and leases), send signing links, collect electronic signatures, track ad conversions, and sync clients to a CRM. This Policy describes how we handle information for two groups:

  • Customers and users. The businesses and individual team members who sign up for accounts or visit the Site.
  • Recipients and signers. The leads, clients, and other people whose information a Customer enters into the App or who receive and sign a document through a signing link.

For most information that Customers process about their own leads, clients, and signers, the Customer is the data controller and SimplySigned acts as a processor, handling that data on the Customer's behalf and under their instructions.

2. Information we collect

We collect information in three ways: you give it to us, a Customer gives it to us about you, or it is collected automatically.

  • Information you give us. When you contact us or create an account, we receive details such as your name, email address, phone number, company name, and anything you include in your messages.
  • Account and billing data. Login credentials (handled by our authentication provider), organization and team membership, roles, and, where applicable, billing and subscription details handled through our payment provider. We do not store full payment card numbers.
  • Lead and recipient data. Information that Customers enter or import about their leads, clients, and signers, such as names, email addresses, phone numbers, and the source of the lead (including ad click identifiers and campaign data).
  • Agreement and signature data. The agreements, templates, signing-link activity, electronic signatures, generated PDFs, timestamps, IP addresses, and related audit information used to record that a document was reviewed and signed.
  • Sensitive information in agreements. Agreements a Customer sends may contain sensitive personal information about the signer, such as government identification numbers or financial details. We store this as part of the agreement on the Customer's behalf and do not use it for any other purpose. Customers are responsible for collecting only the information they need.
  • Conversion and integration data. Event data we send to advertising platforms (such as Google Ads) and data synced to a Customer's connected CRM or other integrations, along with the credentials needed to make those connections.
  • Usage and device information. Our hosting and infrastructure providers automatically record technical data such as IP address, browser and device type, operating system, referring page, approximate location derived from IP address, and the pages or features you use. This is used to operate, secure, and improve the Services.

3. Third-party collection

We rely on third-party service providers to run the Services. Some of them collect information directly from your browser or device, under their own privacy policies, when you use the Services. These include providers for:

  • Authentication (sign-in, sessions, organizations and roles).
  • Hosting and database (storing Customer Content and application data).
  • Text message and email delivery (sending signing links and notifications).
  • Payments (subscriptions and invoices).
  • Advertising platforms and CRMs that a Customer chooses to connect.

Our service providers act on our instructions and are not permitted to use your information for their own purposes except as required to provide their service or by law. Advertising platforms and CRMs are different: they receive data only when a Customer connects them, they act at that Customer's direction, and they use the data they receive under their own terms and privacy policies. A current list of our service providers is published at simplysigned.co/subprocessors. Customers who need a processor agreement can rely on our Data Processing Addendum.

4. How we use information

  • To create and administer accounts, organizations, and team roles.
  • To provide the App's core features: capturing leads, building and sending agreements, collecting signatures, generating PDFs, tracking conversions, and syncing clients to a CRM.
  • To deliver signing links and related messages by email or text on a Customer's behalf.
  • To respond to your questions and provide support.
  • To notify you about updates, security notices, and news related to SimplySigned.
  • To operate, secure, monitor, and improve the Services and prevent abuse.
  • To comply with legal obligations and enforce our agreements.

5. We never sell your data

We do not sell, rent, or trade personal information, and we have not done so in the past. We do not share personal information with third parties for their own marketing. Text-messaging opt-in data and consent are never shared with any third party, and we do not share mobile phone numbers with third parties or affiliates for their own marketing or promotional purposes.

When a Customer connects an advertising platform, we send conversion events to that platform at the Customer's direction and only for that Customer's own campaigns. These events may include hashed email addresses and phone numbers so the platform can match the event to an ad click. We do not use Customer Content to build advertising profiles or to advertise to signers.

6. How we share information

We share information only as needed to run the Services:

  • Service providers described in Section 3, acting on our instructions.
  • At a Customer's direction: with the advertising platforms, CRMs, and other integrations a Customer chooses to connect, and with the recipients a Customer sends agreements to.
  • Within an organization: team members of a Customer's organization can see the leads, agreements, and signatures that belong to that organization.
  • Legal reasons: if required by law, regulation, legal process, or to protect the rights, safety, and property of SimplySigned or others.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. Text messages

Customers use the App to send signing links and related messages by SMS to their recipients. Customers are responsible for having the recipient's consent to be contacted. Message and data rates may apply. Messages are sent from a shared SimplySigned toll-free number. Recipients can reply STOP to opt out, which blocks all further SimplySigned text messages to their phone number until they reply START, and can reply HELP for assistance. We log delivery status and opt-out requests to honor them. If an agreement remains unsigned, up to five reminder messages may be sent for it, either at times the Customer scheduled when sending or manually. A STOP reply also cancels any scheduled reminders for that phone number.

8. Cookies

The Site and App use cookies or similar technologies for authentication and basic functionality. You can control cookies through your browser settings, though some features may not work without them. We do not use cookies for cross-site advertising.

9. Data retention

We keep account, agreement, signature, and contact information for as long as needed to provide the Services, comply with legal and recordkeeping obligations, resolve disputes, and enforce our agreements, and then delete or anonymize it. Signed agreements and their audit trails may be retained for as long as the Customer who created them keeps their account, because they serve as the legal record of the signature. Signers who need a copy of a signed agreement after the Customer has deleted its organization should contact the Customer directly.

10. Deleting your data

Anyone can ask us to delete their personal information. This applies to Customers, team members, and recipients or signers.

  • Customers and team members can delete their organization from within the App and can request deletion of their individual account by emailing info@simplysigned.co. Deleting an organization immediately deactivates it and removes it from the App. For 30 days after that, the Customer can ask us by email for an export. After that 30-day window, its leads, templates, agreements, and integration credentials are permanently deleted from active systems within a further 30 days.
  • Recipients and signers can email info@simplysigned.co. Because the Customer who sent you the document controls that data, we may route the request to them and help them respond.

We act on other deletion requests within 30 days. We may keep limited information where the law requires it, where it is needed to preserve a signed agreement as a legal record for the other party, or in backups that are overwritten on a rolling schedule.

11. Your choices and rights

You may ask us to access, correct, export, or delete the personal information we hold about you, or to stop contacting you, by emailing info@simplysigned.co. Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA or other state privacy laws, including the right not to be discriminated against for exercising them. We will honor applicable rights and respond within the timeframes those laws require. If your information was provided to us by a Customer using the App, we may refer your request to that Customer and assist them in responding.

12. Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. Security

We take reasonable technical and organizational measures to protect information, including access controls, encryption in transit and at rest, and role-based permissions within organizations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

14. International users

The Services are operated from the United States and are intended for Customers located in the United States. Information is stored and processed in the United States.

15. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

16. Contact

Questions about this Policy or requests about your data? Email info@simplysigned.co.