Privacy policy

What this covers

Tulu Sign is a product of Tulu Tech, a company in Sri Lanka. In this policy, “we” and “us” mean Tulu Tech, and we are responsible for the personal information described here. It explains what personal information we collect through Tulu Sign, why, and what we do with it. It covers people with an account (senders) and people who are sent a document to sign (signers).

What we collect

From senders: your name, email address and password (stored only as a one-way hash), the documents you upload, the names and email addresses of the people you send them to, and your payment status (card details are handled by our payment provider, not by us).

From signers: the name and email address the sender gave us, the signature you add (typed, drawn or uploaded), anything you fill in, and whether you signed or declined.

For the record of each document: the time of each step, the IP address and the device (browser and operating system) it came from. This record is what makes a signed document trustworthy, so it is kept with the document.

Why we use it

To run the service: to show documents to the right people, email them links and codes, make the signed copy and its certificate, keep the record, take payment and answer support requests. We do not sell personal information, and we do not use it for advertising.

Who we share it with

Only the providers we need to run the service: the company that delivers our emails, the companies that host our servers and store files, and our payment provider. Each processes the information only on our instructions. We may also disclose information when the law requires it.

The people on a document see each other’s names and email addresses on the certificate of completion.

How long we keep it

Documents and their records are kept while the sender’s account is open, so the signed copy and its proof stay available. Deleting a draft that was never sent removes it completely.

How we protect it

Connections are encrypted. Signing links, codes and sessions are stored only as hashes, so a copy of our database cannot be used to open or sign anything. Documents are never public.

Your rights

You can ask to see, correct or delete the personal information we hold about you, or object to how we use it. Email [email protected]. A signer can ask too; where a document must be kept as evidence of an agreement, we will explain what we can remove.

This website

This website sets no tracking cookies. It remembers whether you chose the light or dark theme in your own browser’s storage.

Contact

Tulu Tech, Sri Lanka, the company behind Tulu Sign. Email [email protected] or [email protected].