Privacy policy
Last updated: 13 September 2026
Who is responsible
ADLX Ventures, a Belgian company (company number BE 0784.326.261), publishes EmailSign and is the controller of the data described below. Contact: hello@emailsign.app.
What we collect
Account: your email address, your name and profile picture if you sign in with Google, your preferred language and your sign-up date.
Signatures: the details you enter (name, job title, phone, address, links, social profiles) and the images you upload (logo, photo, banner).
Payments: handled by Stripe. We keep your customer and subscription identifiers, never your card details.
Click tracking, only on paid signatures where you turn it on: when a recipient clicks a link in your signature or loads the tracking image, we record the date, the link type, the country, the device type and a keyed hash of the IP address. The IP address itself is never stored.
Feedback: the message you send, the page it was sent from and your email address if you choose to give it.
Site statistics: Plausible Analytics and Ahrefs Web Analytics measure visits without cookies and without personal data.
Why we use it
To provide the service you signed up for: saving, displaying and installing your signatures (performance of a contract).
To bill paid plans and keep accounting records (contract and legal obligation).
To send you messages about your account and product updates. You can ask us to stop product updates at any time (legitimate interest).
To improve EmailSign using aggregated statistics (legitimate interest).
Your recipients
When you turn on click tracking, EmailSign processes data about the people who receive your emails on your behalf. You remain responsible for informing them, for example with the disclaimer available in the builder.
Who processes it
We never sell your data. It is processed by the service providers we need to run EmailSign: Supabase (database, sign-in and image storage), Stripe (payments), Google (only if you choose Google sign-in), Infomaniak (email), Plausible and Ahrefs (cookieless statistics) and our application hosting provider.
Some of these providers may process data outside the European Union. In that case, transfers are covered by the European Commission standard contractual clauses or an adequacy decision.
How long we keep it
Your account, signatures and tracking data are kept as long as your account exists. When you delete your account from the Account page, all of it is deleted immediately.
Billing records are kept for the period required by Belgian accounting law.
Your rights
You can access, correct, delete or export your data, object to its processing or ask us to restrict it. Write to hello@emailsign.app. You can also lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).
Cookies
EmailSign only uses the cookies needed to keep you signed in and to remember your language. No advertising or tracking cookies, so no consent banner.
Security
Every table is protected by row-level security, all traffic goes over HTTPS, and IP addresses are hashed before storage.