Privacy Policy

Enclave Technologies Inc. ("Enclave," "we," "us," or "our") operates Enclave Sign - encrypted document signing available at sign.enclave.talk, through our web application, API, SDK, and related services (the "Service").

This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding it. Enclave Sign is designed so that document content is encrypted client-side before it reaches our servers. We operate the Service without routine access to plaintext documents.

By using the Service, you agree to the collection and use of information in accordance with this policy.

This policy applies to individuals and organizations that create an Enclave Sign account, send or sign envelopes, integrate through our SDK or API, or otherwise use the Service.

If you sign a document because another Enclave Sign customer sent you an envelope, that customer may also process information about you under its own privacy policy. Enclave Sign facilitates encrypted signing workflows; the sender controls the envelope and recipient list.

Account and profile information

• Email address and authentication identifiers (via Enclave Account)
• Organization or workspace name where applicable
• Billing contact details for paid plans

Envelope and signing metadata

• Envelope identifiers, status, timestamps, and participant roles
• Recipient email addresses or identifiers supplied by the sender
• Signature field placement metadata and completion events
• Cryptographic signature artifacts, hashes, and audit trail records
• Encrypted document payloads stored in ciphertext form

Verification integration data

When you use identity verification features powered by Enclave Verify, verification and certificate data is handled under the Enclave Verify Privacy Policy in addition to this policy.

Billing information

We use Stripe to process subscription and usage-based billing. We store Stripe customer and payment method reference IDs. Full payment card details are held by Stripe and governed by Stripe's Privacy Policy. We do not store your card number.

Technical information

• IP address and request logs for security, abuse prevention, and infrastructure operations
• Device and browser information necessary to operate the signing application

We also do not:

• Sell personal information to data brokers or advertisers
• Use signing data for behavioral advertising or cross-platform tracking
• Train machine learning models on your document content
• Provide document content to third parties except as directed by your use of the Service or required by law

We use the information we collect to:

• Create and manage Enclave Sign accounts and workspaces
• Deliver, track, and complete signing envelopes
• Generate verifiable audit trails and completed document packages
• Process billing and enforce plan limits
• Integrate with Enclave Verify where you enable verification features
• Prevent fraud, abuse, and unauthorized access
• Respond to support requests and legal obligations
• Improve the reliability and security of the Service

We do not sell personal information. We share information only in the following limited circumstances:

With envelope participants

Senders, signers, and authorized viewers receive access to envelope status and completed packages according to the permissions configured for that envelope.

Service providers

• Supabase - database, authentication, and backend infrastructure
• Stripe - payment processing and billing
• Vercel and Cloudflare - hosting, CDN, and security
• Enclave Account - shared authentication for Enclave products
• Enclave Verify - identity verification when enabled

Legal requirements

We may disclose information when required by law, valid legal process, or to protect the rights, property, or safety of Enclave Sign, our users, or the public. Because document content is encrypted and we do not hold decryption keys, we may be unable to produce plaintext document content even when legally compelled.

Business transfers

In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy where required by law.

• Encryption and signing operations occur in the client application
• Completed envelopes are sealed with cryptographic audit artifacts
• Download packages are delivered through authenticated, time-limited access
• Optional Enclave Verify integration adds identity assurance without changing our zero-knowledge document model

We retain account, envelope, and billing records for as long as your account is active or as needed to provide the Service. Retention of encrypted envelopes may depend on your plan and workspace settings.

If you delete your account or request erasure:

• Profile and account data is deleted in accordance with our account erasure process
• Active envelopes and stored ciphertext are removed according to applicable retention rules
• Security and billing logs may be retained for a limited period where required by law or for fraud prevention
• Stripe retains payment records under its own policies and legal obligations

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at privacy@enclave.talk.

Depending on where you live, you may have the following rights regarding your personal information:

• Access - request a copy of the personal data we hold about you
• Correction - update inaccurate or incomplete information
• Deletion - request deletion of your account and personal data
• Portability - receive your data in a structured, machine-readable format
• Objection or restriction - object to or restrict certain processing

To exercise these rights, contact us at privacy@enclave.talk. We will respond within 30 days and may require identity verification before processing your request.

European users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation. Our legal bases for processing include contract performance, legitimate interests (security and fraud prevention), legal obligation, and consent where applicable.

You have the right to lodge a complaint with your local data protection authority. Data is primarily processed in the United States.

California residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect and disclose, to request deletion, and to opt out of any sale of personal information. We do not sell personal information and do not discriminate against you for exercising your privacy rights.

To submit a CCPA request, contact privacy@enclave.talk.

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated effective date and provide additional notice where required by law.

Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

Privacy questions, data requests, and complaints should be directed to:

• Enclave Technologies Inc.
• Hattiesburg, MS 39401
• Privacy: privacy@enclave.talk
• Legal: legal@enclave.talk
• Support: support@enclave.talk
• Website: https://sign.enclave.talk