1. Introduction
上上簽線上合約簽署系統 (hereinafter "the Service") highly values user privacy. This privacy policy explains how we collect, use, store and protect your personal information.
By using the Service, you acknowledge that you have read, understood and agreed to all terms of this privacy policy. If you disagree with any part, please do not use the Service.
2. Data Collection
We may collect the following types of data:
Information You Provide
- Account Information: Name, email, company name, phone provided during registration
- Contract Data: Contract documents you upload and related settings
- Signing Data: Signer's name, email, ID number (if provided), signature image
- Contact Information: Information provided through contact forms
Automatically Collected Data
- Device Information: Browser type, operating system, screen resolution
- Connection Information: IP address, access time, referrer
- Usage Records: Feature usage, operation trails
Signing Evidence Collection: To ensure legal validity of electronic signatures, we collect relevant evidence during signing including operation time, IP address, browser fingerprint, etc., as proof of signing action.
3. Data Usage
The data we collect is used for:
- Providing, maintaining and improving the Service
- Processing your contract signing requests
- Verifying user and signer identity
- Sending service-related notifications (signing invitations, completion notices)
- Responding to your inquiries or support requests
- Analyzing service usage to improve user experience
- Preventing fraud and maintaining service security
- Complying with legal obligations
4. Data Storage and Protection
Storage Location
Your data is stored on secure servers, and we employ industry-standard security measures to protect your data.
Security Measures
- Transmission Encryption: All data transmission uses HTTPS/TLS encryption
- Password Protection: User passwords stored using one-way hash encryption
- Access Control: Only authorized personnel can access user data
- Regular Backup: Regular data backups to prevent data loss
Retention Period
- Account Data: Account duration plus 30 days after deletion
- Contract Documents: Per user settings or 90 days after account deletion
- Signing Records: At least 5 years for legal evidence purposes
- System Logs: 90 days
5. Data Sharing
We do not sell your personal data. We may share your data only in these circumstances:
- Contract Parties: Sending signing invitations and related information to designated signers
- Service Providers: Third parties helping provide the Service (like email services) who must maintain confidentiality
- Legal Requirements: When required by law or lawful government agency requests
- Rights Protection: To protect the Service, users, or public rights, property or safety
6. Cookie Usage
The Service uses cookies and similar technologies to:
- Maintain your login status
- Remember your preference settings
- Analyze service usage
- Improve service performance and security
You can manage or disable cookies through browser settings, but this may affect some features.
7. User Rights
Under applicable privacy laws, you may have these rights:
- Access: Request access to personal data we hold about you
- Correction: Request correction of incorrect or incomplete data
- Deletion: Request deletion of your personal data (where legally permitted)
- Portability: Request your data in structured format
- Objection: Object to certain data processing
To exercise these rights, please submit a request through our Contact Us page. We will respond within reasonable time.
Note: Since signing records have legal effect, completed contracts and related evidence may not be deletable upon request, to protect all parties' rights.
8. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal data from children. If you discover a child has provided personal data to us, please contact us to delete it.
9. Policy Updates
We may update this privacy policy from time to time. Updated policy will be posted on this page with updated "Last Updated" date. For significant changes, we will notify you by email or service announcement.
We recommend reviewing this policy periodically to understand how we protect your data.
Last Updated: March 7, 2026
Effective Date: March 7, 2026