Privacy Policy

Information we process

SignKoala processes uploaded documents, signature images, participant names and email addresses, comments, and signing activity records. Account information is also processed when you choose to create an account.

These details support document preparation, email verification, invitations, delivery, saved signing history, and records of the signing process. Technical and operational records help maintain the service and protect access.

Sharing information

Document content and relevant signing information are shared with the participants you select. Service providers involved in hosting, document processing, and email delivery may process information needed to perform those functions.

Only upload information needed for your signing request. You are responsible for having an appropriate lawful basis to provide other people’s personal information and for informing them about the request.

Public verification

Anyone with a certificate reference or an existing verification link can check for an available completed signing record. A successful check shows “Valid signature” and the signing date. Otherwise, the result shows “Unable to verify” and the date checked.

The public result does not show document names or titles, document contents, names or email addresses of participants, signature images, file fingerprints, or download links.

Storage and retention

Documents and signatures are stored privately with access controls. Protect your account and sharing links, and download completed files before the expiry date shown in your workspace. SignKoala should not be your only archive.

Document access expiry does not necessarily mean that every related record is immediately deleted. Signing, delivery, and operational records may have different retention requirements. Minimal verification evidence can remain available after document files are deleted, and saved copies can retain their associated verification evidence.

Data Privacy Act of 2012

The Philippine Data Privacy Act of 2012 (Republic Act No. 10173) governs the processing of personal information. Its principles include transparency, legitimate purpose, and proportionality.

Your privacy rights

Subject to applicable legal conditions and exceptions, you have rights to be informed, access your personal data, correct inaccurate information, object to processing, and request erasure or blocking. Rights to data portability and damages may also apply.

For concerns about a document or why you were invited, contact the person or organization that sent the signing request. For guidance on exercising your data privacy rights or filing a complaint, visit the National Privacy Commission.

Read the Data Privacy Act · Learn about your privacy rights