Privacy Policy

1. Introduction

MITI Sphere Solutions Private Limited, through Signulu, respects the privacy of website visitors, customers, administrators, users, recipients and signers.

This Privacy Policy explains how Signulu collects, uses, shares, retains and protects personal data.

2. Information collected

Signulu may process:

• names, email addresses and mobile numbers;
• organisation and designation details;
• account and administrator information;
• documents, templates and form-field information;
• signer and recipient information;
• IP address, device, browser and timestamp information;
• authentication and signing status;
• consent records and audit trails;
• digital-certificate and document-hash information;
• billing, support and communication information; and
• information voluntarily provided by users.

3. Purpose of processing

Personal data may be processed to:

• create and manage accounts;
• provide signing and document workflows;
• authenticate signers;
• send transaction notifications;
• generate audit records;
• maintain security and prevent fraud;
• provide support;
• process payments and invoices;
• comply with applicable law; and
• enforce contractual rights.

4. Privacy roles

Signulu acts as a Data Fiduciary when it determines the purpose and manner of processing, such as for website enquiries, account registration, billing, support and security.

Where an enterprise Customer uploads documents and recipient information, that Customer ordinarily acts as the Data Fiduciary and Signulu processes the information on the Customer's instructions.

5. Aadhaar information

Where Aadhaar-based eSign is used, authentication is performed through the relevant authorised eSign service.

Unless expressly disclosed and legally permitted, Signulu does not store Aadhaar OTPs, biometric information, private signing keys or complete Aadhaar authentication credentials.

Signulu may retain limited transaction details such as authentication status, response code, certificate information, timestamp and document hash.

6. Sharing of information

Information may be shared with authorised cloud-hosting providers, Certifying Authorities, eSign Service Providers, communication gateways, payment providers, customer-support providers and Government authorities where necessary to provide the service or comply with law.

Service providers are permitted to process information only for authorised purposes and subject to appropriate contractual safeguards.

7. Retention and deletion

Personal data and documents will be retained for the period required to provide the service, comply with the Customer's instructions, maintain transaction evidence, meet legal obligations and resolve disputes.

Deleted information may remain temporarily in backups or immutable security records until the applicable retention cycle is completed.

8. User rights

Subject to applicable law, individuals may request access, correction, completion, updating or erasure of their personal data, withdraw consent, submit a grievance and exercise other rights available under applicable data-protection law.

Requests relating to documents controlled by an enterprise Customer may be referred to that Customer.

9. Privacy contact

For privacy enquiries or requests, contact:

Privacy / Grievance Officer: Legal Team
Email: privacy@signulu.com
Address: MILLENNIUM Tower, 5th Floor, Plot# 10/1, Sector – III, HUDA Techno Enclave, Madhapur, Hyderabad, Telangana – 500081.