What we collect, and why.

1. Who we are

SignPad is operated by Brix Super Group Pty Ltd ("we", "us"), an Australian company. Our registered address is in Sydney, Australia. You can reach us any time at sign@signpad.com.au.

2. What we collect

When you use SignPad, we collect:

• Account data — your name, email, company name (if applicable), and password hash.
• Document data — the documents you upload, the signers you nominate, and the signed PDFs we produce.
• Audit data — for every action (send, view, sign), we record the timestamp, IP address, approximate geolocation (city / region / country, derived from IP), and a parsed device summary (browser, operating system).
• Workspace branding — if you upload a company logo and brand colour, we store it so we can apply it to your signing emails and sign page.

3. Why we collect it

Audit data exists because that's what makes an electronic signature legally binding. Without timestamps and IP records, a signed document is just a picture of a signature. We keep this data permanently and pair it with the signed PDF.

Everything else (account, document, branding) we collect so the product can work.

4. Where it lives

All data is stored on servers physically located in Australia. We do not replicate, mirror, or back up customer data outside Australia.

5. Who we share it with

Nobody, except:

• The signers you explicitly send documents to.
• Our payment processor (Stripe), if you are on a paid plan.
• Australian law enforcement, if compelled by a valid court order.

We do not sell, rent, license, or share your data with advertisers, AI training providers, or data brokers. Ever.

6. How long we keep it

Signed documents and their audit trails are kept for as long as your account is active, plus 7 years after the last activity (to match the statutory record-keeping period for most Australian business documents).

You can request deletion of your account and all associated data at any time by emailing us.

7. Your rights

You have the right to access, correct, or delete your personal data. We respond to all such requests within 30 days. Email sign@signpad.com.au to make a request.

8. Cookies

We use a single first-party cookie to keep you signed in. We do not use third-party cookies, tracking pixels, or analytics that profile you.

9. Changes to this policy

If we make a material change, we'll email every account holder at least 30 days before it takes effect.

10. Contact

Privacy questions: sign@signpad.com.au. We answer every message.