Privacy Policy
Last updated: June 22, 2026
This policy explains what personal data Signroom.cz processes, for what purpose, and how it is protected. It applies both to app users and to recipients of documents sent for signature.
Data controller
The data controller is Dalibor Bočan, business ID (IČO) 23668415, a sole trader (OSVČ). For data-protection matters contact us at dbocan02@gmail.com.
What data we process
Account details (name, email, organization name), the documents you upload, and recipient details (name, email) you enter in order to send for signature. We also keep a signing audit record (IP address, time, device type) that is embedded in the final document, plus technical logs necessary to run and secure the service.
Connecting Google Drive
If you connect your Google account, Signroom requests only the "drive.file" permission. This lets the app create and manage solely the files it uploads itself (your signed PDFs) in a "Signroom" folder on your Drive. The app cannot see, read, or modify any other files in your Google Drive. You can disconnect at any time in the app's Settings or on your Google account's security page.
Limited Use of Google data
Signroom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google API data for advertising, do not sell it, and make it available only to the extent necessary to provide the feature of saving signed documents to your Drive.
Storage and security
Data is stored with processors in the EU (Supabase database and storage, region eu-west-1). Access tokens to Google Drive are stored encrypted. Access is protected by login and all communication uses HTTPS.
Retention and deletion
We keep data for the lifetime of the account and as long as needed to meet legal obligations. You can request deletion of your account and its data at dbocan02@gmail.com; disconnecting Google Drive immediately revokes the app's access to your Drive.
Third-party processors
To operate the service we use: Supabase (database, authentication, storage), Stripe (payments), Resend (email delivery), Netlify (hosting), and Google (optional save-to-Drive). These providers process data only on our instructions.
Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to lodge a complaint with the data-protection authority. We handle requests at dbocan02@gmail.com.
Contact
For privacy questions contact us at dbocan02@gmail.com.