Last updated 3 November 2026
This policy explains what we do with your information when you use this website, write to us, use Sigli Cloud or buy a Sigli licence. It is written in plain language on purpose.
Who we are
Sigli is a product of Tradiant LLC, a company registered in Georgia. You can reach us at hello@sigli.app about anything in this policy, including a request to see or delete what we hold about you.
The short version
- We do not run advertising trackers on this website.
- We never see or receive your card details.
- Sigli never reads, routes or stores anyone’s email. It only sets signatures.
- On Sigli Cloud we keep your team’s signature details to run the service for you, and nothing else.
- A self-hosted Sigli keeps everything on your own server, and none of it is sent to us.
- We do not sell your information to anyone, for any reason.
When you visit this website
Our web host keeps standard server logs: the address your request came from, the page asked for, the time, and which browser was used. These are kept for a short period for security and to fix faults. We do not use them to build a profile of you.
WordPress, which runs this site, sets a cookie only if you log in or leave a comment. There are no advertising or cross-site tracking cookies.
When you write to us or use the chat
If you email us, use the contact form, or open the chat bubble on this site, we keep your message and your email address so we can answer you and so we have a record of what was agreed. Chats are handled in ReplaChat and written-in questions in ReplaTicket, our own software, run by Tradiant on our own servers, not a third-party helpdesk.
We keep support correspondence for up to three years, then delete it. We do not add you to a mailing list because you asked a question.
When you use Sigli Cloud
For your account we keep the name, email address and company you sign up with, a scrambled form of your password that cannot be turned back into it, and the same for each user you invite.
To make your signatures we keep what you put in: the details of each person (name, email address, job title, department, phone numbers and photo), your designs, images and campaigns, and an activity log of who changed what. If you count clicks on a campaign banner, we count each click and keep nothing about the person who clicked.
If you connect Google Workspace or Microsoft 365, we keep the key or secret you give us, encrypted. We use it only to set signatures in Gmail and to read your directory of people, never to read email.
You are the data controller for your people’s details, and we process them on your behalf. Tell your team, in your own privacy notice, that you keep their details for their email signatures. We keep your account until you ask us to close it.
When you pay
Tradiant LLC is the seller. Checkout runs on our own ReplaPay installation.
If you pay by card, Apple Pay or Google Pay, the payment is processed by Stripe. Your card details go straight to Stripe; they never touch this website and we never see them. Stripe handles that data under its own privacy policy, which you can read at stripe.com/privacy. We receive from Stripe only the confirmation of payment, the last four digits and card brand, and the billing details you gave.
If you pay in cryptocurrency, we receive the transaction reference and the amount. Blockchain transactions are public and permanent by design, which is a property of the blockchain rather than something we control.
From a purchase we keep your name or company name, your email address, what you bought, and the date. We need this to run your plan or issue your licence key, and because tax law requires us to keep records of sales, normally for seven years.
What a self-hosted Sigli collects
Nothing that reaches us. Your people, designs and connections are recorded on your machine and stay there. Your copy checks once a day whether its licence key has been withdrawn, which sends nothing about your people or your signatures.
When you run it, you become the data controller for your people’s information, and you take on the duties that come with it.
Who else sees your information
Only the companies we need to run the business: our web and server hosts, our email provider, and Stripe for card payments. On Sigli Cloud, Google and Microsoft receive the signatures you choose to put into Gmail and Outlook, through the connections you set up. Each one only ever sees what it needs to do its job. We do not sell, rent or trade your information.
Your rights
You can ask us to show you what we hold about you, correct it, delete it, or send it to you in a portable form. You can also object to how we use it. Write to hello@sigli.app and we will answer within 30 days. There is no charge.
The one thing we may not be able to delete straight away is a record of a sale, because tax law obliges us to keep it. We will tell you if that applies. A cryptocurrency payment already written to a blockchain cannot be deleted by anyone, including us.
If you live in the European Union or the United Kingdom and you think we have handled your information badly, you may complain to your national data protection authority. We would much rather you told us first, so we can put it right.
Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects people who already use Sigli, we will email them.
Questions about any of this: hello@sigli.app.