Privacy policy
Nevtan is committed to protecting your privacy
This policy explains how Nevtan Sign collects, uses, discloses, retains, and safeguards personal information when you access or use our websites, applications, APIs, electronic signature services, document workflow platform, and related services.
Nevtan does not sell your personal information.
Effective Date: June 6, 2026 — Last Updated: June 6, 2026. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please do not use the Services. If you are a document recipient or signer acting on behalf of a customer's agreement, please contact the organization that sent you the document — that organization controls the information contained within the document.
Jump to a part
Part 1 — Scope & Who This Policy Covers
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information collected by Nevtan in connection with the Services, including information relating to:
This Privacy Policy does not apply to the privacy practices of third-party websites, services, or applications that may be linked from or integrated with the Services. Users should review the applicable privacy policies of those third parties directly.
2. Document Recipients and Signers
Nevtan Sign processes personal information on behalf of its customers (who act as data controllers) when facilitating electronic signature transactions. If you have received a document for signature through Nevtan Sign and have questions about the personal information contained in that document, please contact the organization that sent it to you.
You may exercise privacy rights related to document content by contacting the organization that controls that document. Nevtan will assist customers in responding to such requests where required under applicable law.
Part 2 — Information We Collect
3. Information You Provide Directly
You may provide information to us when you create an account, send or sign documents, request a demo, contact support, subscribe to communications, or otherwise interact with the Services. This includes:
Identity Information
First name, last name, company name, job title, organizational role
Contact Information
Email address, telephone number, mailing address
Account Information
Username, password credentials (stored in hashed form), account preferences and settings
Payment Information
Billing details processed through authorized third-party payment providers. Nevtan does not store full payment card numbers.
Communications
Messages, feedback, survey responses, and other content you send to us
4. Document and Signature Information
When using Nevtan Sign, customers and their authorized users may upload, create, send, or receive documents through the platform. Information processed in this context may include:
Customers are responsible for determining what information is included in documents processed through the Services.
5. Information Collected Automatically
We automatically collect certain technical and usage information when you interact with the Services:
Device Information
Device type, operating system, browser type and version, screen resolution, language settings
Usage Information
Pages viewed, features accessed, session duration, referring websites, interaction patterns within the platform
Network Information
IP address, approximate geographic location derived from IP, network identifiers
Security Information
Login activity, authentication events, system and error logs used for security monitoring and incident detection
6. Cookies and Similar Technologies
Nevtan uses cookies and similar tracking technologies to maintain user sessions, authenticate users, improve platform performance, remember preferences, and analyze usage trends. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
Part 3 — How We Use Your Information
7. Purposes of Processing
Nevtan uses personal information for the following purposes:
Service Delivery
To provide, operate, maintain, and support the Services, including processing electronic signature transactions and document workflows.
Account Administration
To create and manage user accounts, authenticate users, and administer subscriptions and billing.
Security & Fraud Prevention
To detect, investigate, and prevent unauthorized access, fraud, abuse, and security threats.
Customer Support
To respond to inquiries, resolve issues, and provide technical and operational assistance.
Product Improvement
To analyze usage patterns, improve platform functionality, reliability, and user experience, and develop new features.
Communications
To send service notifications, transactional messages, administrative updates, and security alerts.
Marketing
Where permitted by applicable law, to share information about products, services, and events. Users may unsubscribe from marketing communications at any time.
Legal Compliance
To comply with applicable laws, regulations, court orders, legal obligations, and to protect Nevtan's legal rights and interests.
8. Legal Bases for Processing
Where required by applicable law — including the GDPR and equivalent frameworks — Nevtan relies on one or more of the following legal bases to process personal information:
Contractual Necessity
Processing required to provide the Services you have requested, including account management, document processing, and billing.
Legitimate Interests
Processing necessary for our legitimate business interests, including security operations, service improvement, fraud prevention, and internal analytics, where those interests are not overridden by your privacy rights.
Legal Obligation
Processing required to comply with applicable laws, regulations, court orders, or regulatory requirements.
Consent
Where we rely on consent as a legal basis (such as for certain marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
Part 4 — How We Share Information
9. Disclosure of Personal Information
We may disclose personal information in the following limited circumstances:
Service Providers & Subprocessors
To vetted third-party vendors who assist in operating the Services, including cloud hosting, email delivery, customer support tools, security monitoring, and analytics. These providers are contractually bound to protect personal information.
Business Transactions
In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business. We will provide reasonable notice and require the successor entity to honor this Privacy Policy.
Legal Requirements
When required by applicable law, valid court order, subpoena, or regulatory request. We will disclose only the minimum information necessary and will notify affected parties where legally permitted.
Protection of Rights & Safety
To protect the rights, safety, property, or security of Nevtan, our customers, users, or the public, where we reasonably believe disclosure is necessary.
Nevtan does not sell personal information.
10. International Data Transfers
Personal information may be processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.
Where required by applicable law, Nevtan implements appropriate safeguards to protect personal information transferred internationally. Such safeguards may include:
For more information about international transfers and applicable safeguards, please contact privacy@nevtan.com.
Part 5 — Retention & Security
11. Data Retention
Nevtan retains personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods are determined by factors including:
When personal information is no longer required, Nevtan deletes or anonymizes it in accordance with our data retention policies. Customers who wish to request deletion of their data may do so as described in Section 21 (Contact Information) below.
12. Data Security
Nevtan maintains administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and loss. Our security measures include:
Encryption
Encryption of personal information in transit and at rest
Access Controls
Role-based access controls and least-privilege principles
Multi-Factor Authentication
Multi-factor authentication for administrative access
Monitoring & Logging
Continuous security monitoring and logging
Vulnerability Management
Vulnerability management and security testing
Incident Response
Incident response and breach notification procedures
Backup & Recovery
Regular backup and recovery procedures
No security system can guarantee absolute protection against all threats. In the event of a security incident affecting your personal information, we will notify you as required by applicable law.
Part 6 — Your Privacy Rights
13. Privacy Rights
Depending on your location and applicable law, you may have certain rights regarding your personal information:
Access
Request a copy of the personal information we hold about you.
Correction
Request correction of inaccurate or incomplete personal information.
Deletion
Request deletion of your personal information where we no longer have a lawful basis to retain it.
Restriction
Request that we limit how we process your personal information in certain circumstances.
Portability
Receive a copy of your personal information in a structured, commonly used, machine-readable format.
Objection
Object to processing based on legitimate interests or for direct marketing purposes.
Withdraw Consent
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.
Lodge a Complaint
Lodge a complaint with the applicable supervisory authority or data protection regulator in your jurisdiction.
To exercise any of these rights, please contact us at privacy@nevtan.com. We will respond to your request within the timeframe required by applicable law, generally within thirty (30) days. We may need to verify your identity before processing your request.
Some rights may be subject to limitations or exceptions under applicable law, particularly where processing is necessary to fulfill a legal obligation or to protect the rights of others.
Part 7 — Additional Topics
14. Children's Privacy
The Services are not directed toward children under the age of 18. Nevtan does not knowingly collect or solicit personal information from children. If we become aware that we have collected personal information from a child without appropriate parental consent, we will take prompt steps to delete that information.
If you believe we may have collected personal information from a child, please contact us at privacy@nevtan.com.
15. Third-Party Services and Links
The Services may contain links to, or integrate with, third-party websites, applications, or services. Nevtan is not responsible for the privacy practices, content, or security of those third parties. We encourage you to review the applicable privacy policies of any third-party service you use.
16. Changes to This Privacy Policy
Nevtan may update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable law. When we make material changes, we will provide notice through the Services, by email to the address associated with your account, or by other appropriate means, with at least fourteen (14) days' notice where practicable.
The revised Privacy Policy becomes effective on its stated effective date. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy. If you do not agree to the changes, you should discontinue use of the Services before the effective date.
Part 8 — Regional Privacy Disclosures
17. European Economic Area (EEA) — GDPR
If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR). The legal bases for our processing activities are described in Section 8 of this Policy.
You have the right to lodge a complaint with your local data protection supervisory authority if you believe your GDPR rights have been violated. A list of EEA supervisory authorities is available at edpb.europa.eu.
18. United Kingdom — UK GDPR
If you are located in the United Kingdom, your personal information is processed in accordance with the UK GDPR and the Data Protection Act 2018. You may exercise your rights and lodge complaints with the Information Commissioner's Office (ICO) at ico.org.uk.
19. United States — State Privacy Laws
Depending on the state in which you reside, you may have additional privacy rights under applicable state law. These may include rights under the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and similar state privacy frameworks.
In addition to the rights described in Section 13, California residents may request information about the categories of personal information we have collected, the purposes for which it has been used, and any disclosures to third parties. To submit a verifiable consumer request, please contact privacy@nevtan.com.
We do not sell personal information as defined under applicable U.S. state privacy laws. We do not discriminate against users who exercise their privacy rights.
20. Other Jurisdictions
Nevtan serves customers globally. Where applicable privacy laws in your jurisdiction impose obligations not addressed in this Privacy Policy, we will comply with those requirements to the extent they apply to us. For jurisdiction-specific questions, please contact privacy@nevtan.com.
Part 9 — Contact & Resources
21. Contact Information
If you have questions, concerns, or requests relating to this Privacy Policy or our privacy practices, please contact:
Privacy
privacy@nevtan.comLegal
legal@nevtan.comWe aim to acknowledge privacy requests within 5 business days and resolve them within 30 days.