Privacy Policy

This Privacy Policy describes how signitur, operated by Central Media LLC ("signitur," "we," "us," or "our"), a Florida limited liability company located in Orlando, Florida, collects, uses, maintains, and discloses information from users of the signitur.ai website, our web application, our browser extensions and marketplace applications, and all related products and services (collectively, the "Service").

1. Scope of This Policy

This Policy applies to the Service in its entirety, including the marketing website, the signature application at app.signitur.ai, and any integrations, extensions, or applications we distribute.

Where you use the Service as an individual, we act as the controller of your personal information. Where your employer or organization deploys the Service and configures signatures on your behalf, that organization is the controller of the employee data it supplies, and we act as its processor, handling that data according to the organization's instructions and our agreement with it. Employees whose details are placed into a signature by their employer should direct access and deletion requests to their employer in the first instance.

2. Personal Identification Information

We collect personal identification information in the following ways:

Information you provide. When you register for an account, subscribe to a plan, contact support, respond to a survey, or otherwise interact with the Service, we may collect your name, email address, phone number, job title, company name, mailing address, and the contact and profile details you choose to place into a signature.

Account credentials. Where you register with an email address and password, we store your email address and a cryptographic hash of your password. We never store your password itself, and we cannot recover or display it to you or to anyone else, including our own staff. Where you register using Google Sign-In, no password is created or stored at all. If you forget your password, you can ask us to email a reset link to your account email address; that email comes from support@signitur.ai, and the link works only once and expires after one hour.

Payment information. Subscription payments are processed by Stripe, Inc., a PCI DSS Level 1 certified payment service provider. Card details are collected directly by Stripe through its hosted payment fields and are transmitted to Stripe, not to us. We receive only confirmation of payment, the last four digits and brand of the card, the card expiry, billing country and postal code, and subscription status. We do not collect, process, or store full payment card numbers, magnetic stripe data, or card security codes on our systems. Stripe's handling of your payment information is governed by the Stripe Privacy Policy.

Information collected automatically. Certain information is collected automatically when you use the Service and is not "voluntarily submitted." See Sections 3, 6, and 7.

Information from your organization. Where an administrator deploys the Service across a domain, we may receive employee names, email addresses, job titles, departments, phone numbers, and profile photographs from your organization's directory in order to generate signatures.

3. Technical Information Collected Automatically

When you interact with the Service, our servers and our hosting provider automatically receive technical information with each request, including your IP address, browser and operating system type (from your browser's user agent), the page or file requested, the referring URL, and the date and time of the request. If we use website analytics tools (see Section 7), they may also collect information such as screen size, pages viewed, and session duration. We treat IP addresses as personal information. Our application also records how you use it while you are signed in, as described in Section 7.

When this information is used for advertising, it is personal information. On the pages and for the events described in Section 7, your IP address, your browser's user agent, and the identifiers stored in advertising cookies are sent to Meta, together with the pages you viewed and the steps you took, so that Meta can connect that activity to a Facebook or Instagram account. We treat all of this as personal information, including under U.S. state privacy laws, and you can opt out of it at any time (see Section 13).

4. Content You Upload

When you use the Service you may upload logos, photographs, brand assets, illustrations, and other files ("User Content").

• You retain ownership of your User Content. We store and process it only to provide the Service to you.
• We do not use your User Content to train artificial intelligence or machine learning models, and we do not license, sell, or share it with third parties for that purpose.
• Hosted assets are served from public URLs. For a signature to display in a recipient's email client, the image or animation must be retrievable over the public internet. Signature assets are therefore stored at unguessable but publicly addressable URLs on our content delivery network. They are not indexed or listed, but they are not access-controlled. Do not upload material you are unwilling to have retrievable by anyone holding the URL.
• Retention of hosted assets after deletion. See Section 11, which explains what happens to these URLs when you cancel or delete your account.
• Features that process your content automatically. See Section 9 for how your logo is animated, how your profile photo is processed if you use AI video, and how article links you paste into a credibility banner are read.

5. Google Workspace and Microsoft 365 Data

Where you connect a Google Workspace or Microsoft 365 account, we request only the permissions needed to install and manage signatures. Depending on the integration and the permissions you or your administrator grant, this may include the ability to read and update signature settings on the mailbox, and, for organization-wide deployments, to read directory information about users on your domain.

Limited Use commitment. signitur's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We do not use data obtained from Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models.
• We do not retain, store, or repurpose Google Workspace API data for any AI-related process.
• We do not transfer, sell, or share Google Workspace API data with third parties except as necessary to provide the user-facing functionality you have requested, to comply with applicable law, or as part of a merger or acquisition with notice to you.
• We do not read, index, store, or analyze the body content of your email messages.
• All data accessed through these APIs is used strictly to deliver the functionality you have explicitly requested, such as creating, installing, and updating email signatures.

6. Information About Email Recipients

This section describes information collected about people who receive email containing a signature created with the Service. Recipients are not users of the Service and have not agreed to this Policy, so we describe this activity plainly.

What happens. Signature images and animations are hosted on our servers. When a recipient opens an email and their email client loads the signature image, that client makes a request to our servers. That request necessarily transmits the recipient's IP address, user agent string, and the time of the request. This is how images work on the internet and is inherent to any hosted email signature.

Signature analytics (when available). When signature analytics is available on the sender's plan and the sender has enabled it, a signature may include a small invisible image that lets us count when the signature is displayed (an "open"), and links in the signature, such as social profile links, buttons, the logo, or a banner, may be routed through our servers so that we can count clicks before forwarding the recipient to the intended destination. For each open or click we record the time, the signature and link involved, the recipient's approximate country (derived from the IP address), the general device type and operating system (derived from the user agent), and a short one-way hashed identifier, calculated from the IP address and user agent, that lets us count unique visitors without storing the IP address itself. Requests that appear to come from automated link scanners and bots are flagged and left out of the counts. Senders see reports of these opens and clicks for their own signatures.

What we do not do. We do not build advertising profiles of recipients, we do not sell or share recipient data with advertisers or data brokers, we do not attempt to identify recipients by name from these requests, and we do not track recipients across unrelated websites.

Roles and responsibility. When signature analytics is available, with respect to recipient data generated by analytics, the sending user or their organization is the controller and signitur acts as processor. The sender is responsible for providing any notice and obtaining any consent required by law in their jurisdiction and their recipients' jurisdictions. Consent requirements for email tracking pixels are significantly stricter in the European Union and the United Kingdom than in the United States, and enforcement in that area has been increasing.

Controls. When signature analytics is available, senders will be able to turn off analytics and link tracking for their signatures. Turning it off applies to signatures copied or installed after the change; links in emails already sent keep routing through our servers so that they continue to work, and clicks on them may still be recorded. Recipients can prevent opens from being counted by configuring their email client to block remote images, which most major clients support.

Retention. Raw request logs containing recipient IP addresses are retained for no more than thirty (30) days and are then deleted or irreversibly aggregated. When signature analytics is available, open and click records do not contain raw IP addresses and are kept for up to 400 days.

7. Cookies and Tracking Technologies

We use your browser's local storage and session storage, cookies, and similar technologies on our website and application, as described below.

Strictly necessary storage. The application keeps your sign-in session, your signatures, and your settings in your browser's local storage so that the Service works and stays in sync with your account. Our hosting and security provider may also set strictly necessary cookies, for example to protect the Service from bots and abuse. These are required for the Service to work and are used without consent, as permitted by law.

Preference storage remembers choices such as your editor and dashboard settings.

In-app activity. While you are signed in, the application records how you use it: the pages you open, the editor tabs and controls you click (for example "Layouts" or "Use Signature"), and how long you spend on each page and on building a signature. This is recorded by our own code, sent only to our own servers, stored with your account, and seen only by our staff, so that we can find where people get stuck and improve the Service. It does not use cookies or any third-party tool, it does not include what you type into your signature or the files you upload, and nothing is collected from the people who receive your emails. It is kept as described in Section 11.

Analytics cookies. We may use website analytics tools, such as Google Analytics, to understand how our website and application are used so that we can improve them. If we do, those tools may set analytics cookies and collect information such as pages viewed, time spent on the site, referring pages, device and browser type, and approximate location derived from your IP address. Section 10 lists the website analytics provider we use, if any, and we will add any other provider there before it begins collecting data.

Signature analytics (counting opens and clicks on the signatures you send) is a separate feature, described in Section 6.

Tutorial videos. Tutorial videos in the dashboard are hosted on YouTube, a Google service. Nothing is loaded from YouTube until you press play. When you do, the video loads from youtube-nocookie.com (YouTube's privacy-enhanced mode), and Google receives your IP address and browser information and may use cookies or similar technologies, as described in the Google Privacy Policy.

Advertising: the Meta Pixel. We advertise on Facebook and Instagram. To measure whether those ads lead people to sign up, start a trial, or subscribe, and to improve who sees them, we use the Meta Pixel, a script provided by Meta Platforms, Inc. ("Meta"), on these pages only:

• Our website (www.signitur.ai): the home page, the pricing page, and the support page;
• The sign-up and checkout steps of our application (app.signitur.ai): the sign-up page, the profile and first-signature pages that follow it, the checkout page, and the confirmation page you return to after checkout.

The Meta Pixel never loads on the sign-in or password-reset pages, the signature editor, the dashboard, your account pages, or our admin pages, and it is never placed in your signatures or in the emails you send. On the pages above it reports page views, a view of our pricing page, and, in the application, the steps listed in Section 10. This applies to everyone who visits those pages, including people who reach our website by clicking the "Sent with signitur" badge in a free-plan signature.

Advertising: the Meta Conversions API. Because browsers and extensions often block scripts like the Meta Pixel, our servers also report the most important steps to Meta directly: a new account being created, a click in the application that opens our plans pop-up, the first time you copy your signature, checkout being opened, and a subscription starting, whether as a free trial or with a first payment. When your browser and our server report the same step, Meta counts it once. Section 10 lists exactly what is sent.

When advertising is switched off. The Meta Pixel does not load, our own ad-click cookie (sig_fbc, described below) is not written, and nothing is sent to Meta from your browser or from our servers, if any of the following applies:

• you have opted out in the browser you are using, on our Your Privacy Choices page;
• your browser sends a Global Privacy Control signal;
• you appear, from your IP address, to be outside the United States, or we cannot tell where you are.

Nothing tied to your account is sent to Meta, and the Meta Pixel does not load on the application pages while you are signed in to it, if any of the following applies:

• you opted out while signed in to that account, or you created the account, or clicked Go Pro at checkout, in a browser that had opted out;
• we received a Global Privacy Control signal when you created the account, or while you were signed in to it, on any device;
• the account was created before we started using the Meta tools described here, on October 15, 2026.

An account opt-out, including one saved from a Global Privacy Control signal, lasts until you opt back in on our Your Privacy Choices page while signed in to that account, in a browser that is not sending Global Privacy Control. Whatever your account's setting, a browser that sends Global Privacy Control is always treated as opted out. A Global Privacy Control signal we receive later while you are signed in opts the account out again. Our website (www.signitur.ai) never knows who you are, even in a browser where you are signed in to the application, so it follows only the choice saved in that browser and Global Privacy Control.

We work out your location from your IP address; for this purpose, Puerto Rico, Guam, and the U.S. Virgin Islands count as the United States. On our website, if that check does not answer within about a second, the Meta Pixel does not load. The check is not always accurate, for example when you use a VPN or travel. For a subscription start that our servers report from our payment processor's confirmation (see Section 10), we use the location we detected when you signed up and when you clicked Go Pro at checkout.

Advertising cookies. Unless one of the conditions above applies, these first-party cookies may be set on signitur.ai:

• _fbp (set by Meta's script): a random identifier for your browser, which lets Meta recognize the same browser across visits;
• _fbc (set by Meta's script): stores the click identifier ("fbclid") that Facebook and Instagram add to links, for example to our ads, when you arrive through such a link;
• sig_fbc (set by our own script on the pages listed above): a copy of that click identifier, written only when you arrive through a link that carries it, so that the click can still be counted if your browser blocks Meta's script. It lasts 90 days, although some browsers, such as Safari, may delete it sooner.

How long Meta's cookies last, and how Meta uses them, is set by Meta's own policies. Meta may use cookies, web beacons, and similar technologies to collect or receive information from the pages listed above and from elsewhere on the internet, and may use that information to provide measurement services and to target ads, including ours. Where your browser allows it, Meta may also recognize you through cookies on its own domains, for example if you are logged in to Facebook or Instagram in the same browser. Our pages also keep short-lived notes in your browser's session storage so that each step is reported only once, including a step that is reported from the next page you open; your browser deletes them when you close the tab.

Your choices. You can turn off the advertising measurement and sharing described above at any time, in one click, on our Your Privacy Choices page.

• Opting out sets a cookie named sig_optout on signitur.ai, which records only that this browser has opted out and lasts 400 days from the last time it is renewed on our site unless you opt back in or clear your cookies (some browsers may delete it sooner).
• If you are signed in when you opt out, we also save the choice on your account, so it covers everything tied to your account, and the application pages on every device where you are signed in to it.
• We treat a Global Privacy Control (GPC) signal from your browser as the same opt-out, wherever you are. If we receive it when you create your account or while you are signed in, we save it on your account too.
• Each browser keeps its own cookies, including the browsers built into the Facebook and Instagram apps. A choice made while signed out applies to the browser it was made in, and to any account you later create, or check out with, in that browser. Our website follows only the choice saved in the browser you are using.
• You can also use the industry tools at aboutads.info/choices and youronlinechoices.eu, and you can control how Meta uses information to show you ads in Meta's Ad Preferences; those tools are run by others and work separately from our opt-out.

If we use analytics cookies, we will provide a way to manage your preferences (for example, a cookie settings link) and, where required by law, including in the EU, UK, and certain other jurisdictions, ask for your consent before setting them. You will be able to change or withdraw that consent at any time. You may also configure your browser to refuse cookies or clear local storage, though this may sign you out or stop parts of the Service from working. Clearing your cookies also removes the sig_optout cookie, so in that browser the opt-out must be made again for our website, and for everything else unless it is saved on your account.

The advertising cookies described above are used for cross-context behavioral advertising (also called targeted advertising). We do not use any other cookies for that purpose.

8. How We Use Collected Information

We use the information we collect to:

• Provide and operate the Service — create, render, host, and deploy your signatures, including optional features you choose to use, such as AI video and credibility banners;
• Process payments — bill subscriptions and custom design fees through our payment processor;
• Provide customer support — respond to inquiries, troubleshoot, and resolve issues;
• Improve the Service — analyze usage patterns, including the in-app activity described in Section 7, to understand how the Service is used and where it can be improved;
• Measure and improve our advertising — report the visits and steps described in Sections 7 and 10 to Meta, so that we can see which of our ads on Facebook and Instagram lead to sign-ups, trials, and subscriptions, and so that Meta can show our ads to people more likely to be interested, including people who have visited our website and people similar to our customers, unless you have opted out (see Section 13);
• Communicate with you — send transactional messages, service announcements, security notices, and, where you have opted in, marketing communications you can unsubscribe from at any time;
• Secure the Service — detect, investigate, and prevent fraud, abuse, credential compromise, and unauthorized access;
• Comply with legal obligations — meet applicable laws, regulations, tax requirements, and lawful requests from authorities.

9. Artificial Intelligence and Automated Features

This section explains which features process your content automatically, and which of them involve an outside provider.

Logo animation

Your animated logo is generated by our own software, running on our hosting provider's infrastructure (Cloudflare). Your logo is not sent to a third-party AI vendor to create it.

AI video (Pro feature)

AI video is an optional feature that turns your profile photo into a short moving portrait, about five seconds long, for your signature. Nothing is sent to an outside provider unless you start a generation yourself.

• Who processes your photo. When you start a generation, we send your profile photo to Replicate, LLC ("Replicate"), which runs a third-party video-generation model, currently Kling v2.1, developed by Kuaishou. Replicate states that data for this model is sent from Replicate to Kuaishou. We send only the photo and our own fixed instructions for the motion; we do not send your name, email address, or other contact details.
• How the photo reaches Replicate. Smaller photos are sent directly with the request. Larger photos are placed at a temporary, hard-to-guess web address on our servers so that Replicate can fetch them; anyone holding that address could retrieve the photo while it exists. That copy is deleted as soon as the generation finishes and expires automatically within one hour in any case.
• What we keep. We download the generated video and store it on our servers, at an unlisted address, with your account and with no fixed expiry. We use it only to build the animated profile image in your signature, which is then hosted like your other signature assets (see Section 4).
• What Replicate keeps. According to Replicate's documentation, for predictions created through its API, which is how we use it, input parameters, output values, output files, and logs are automatically removed after one hour by default. Replicate's terms allow it to use the inputs and outputs it receives to provide the output and operate its service (and to train models that a customer chooses to create, which we do not do), and to improve its products only with aggregated, anonymized usage data. See the Replicate Privacy Policy and Replicate Terms.
• What Kuaishou keeps. Kuaishou's handling of the data it receives is governed by its own API terms and privacy policy, which are linked from the model's page on Replicate.
• Your choice. If you do not want your photo processed this way, do not use AI video. Every other feature works without it.

Credibility banners (Beta)

When you paste a link to an article or publication into a credibility banner, our server fetches that public web page, identifying itself as "signitur-credibility/1.0", to read the publication's name, its logo, and the article's headline. The request comes from our server, not from your browser, so the publisher sees our server's address rather than yours. We cache the publication's name and logo for 30 days so that the next customer featured by the same publication does not trigger another fetch; that cache is kept per publication and is not linked to your account. The link you paste, any logo you upload instead, and the banner you create are saved with your signature like your other User Content.

Our commitments

• We do not use your uploaded content, or the output generated from it, to train AI models, and we do not sell or license your content to anyone for that purpose.
• If we add a feature that sends your content to another AI provider, we will name that provider in the sub-processor table in Section 10 before it begins processing.
• AI-generated output belongs to you, as described in our Terms of Use.

10. Sharing Your Information and Service Providers

We do not sell your personal information for money, and we do not rent it. We do share some personal information with Meta for advertising, as described below. Under some U.S. state privacy laws, including California's, this may count as a "sale" of personal information, as "sharing" it for cross-context behavioral advertising, or as processing it for "targeted advertising." You can opt out at any time on our Your Privacy Choices page (see Section 13).

We share information only in these circumstances:

Service providers (sub-processors). We use the vendors below to operate the Service. We share with each vendor only the information it needs for the purpose listed, and each handles that information under its own terms.

Advertising partner: Meta. Unless advertising is switched off for you as described in Section 7, the Meta Pixel and our servers send the following to Meta Platforms, Inc. Meta does not act as our service provider for this: it receives the information as a separate company and uses it under its own Privacy Policy and Business Tools Terms, including to show and measure ads.

• What we report. Page views on the pages listed in Section 7; a view of our pricing page; a new account being created; a click in the application that opens our plans pop-up; the first time you copy your signature from the application (only that it happened, never the signature itself); checkout being opened; and a subscription starting, whether as a free trial with a saved card or with a first payment. With the checkout and subscription-start events we also send the plan, number of signatures, billing period, and price in U.S. dollars, and, for a subscription start, the Stripe subscription ID. For a free trial, the price sent is the plan's price, although nothing is charged until the trial ends. We do not send the payment taken when a free trial ends, renewals, upgrades, refunds, cancellations, or failed payments.
• Hashed details about you, once you have an account. Your email address (never sent for an account created with Google Sign-In), your first name, last name, and phone number (from your profile, if you gave them), your country (estimated from your IP address), and our internal account ID, which in this hashed form is also part of the reference number for a new account. These are hashed with SHA-256, in your browser or on our servers, before they are sent. Hashing turns each value into a fixed string of characters, which is the format Meta uses to match it to Facebook and Instagram accounts. Hashed data is not anonymous: Meta can match it to anyone who has given Meta the same details.
• Sent as they are, not hashed. Your IP address; your browser's user agent; the Meta cookie identifiers described in Section 7; the address of the page, with form contents and sign-in and checkout codes removed; from the Meta Pixel, the page you came from and basic technical details such as screen size; and a reference number for each event, which for a subscription start contains the Stripe subscription ID.
• When. The Meta Pixel reports as you visit and act on those pages; our servers report each step as it happens. A subscription start is reported within seconds of our payment processor confirming it, whether or not you return to our confirmation page; for that report we may use the cookie identifiers, IP address, browser user agent, and page address saved when you clicked Go Pro at checkout, kept only as long as Section 11 says. A click that opens our plans pop-up is reported by our servers when you click; on the editor, dashboard, and account pages, where that pop-up usually appears, the Meta Pixel does not load, so it reports the click on the next page you open where it does load, such as the checkout page.
• Never sent. Your signatures, logos, photos, or other User Content; your job title or company name; your password; your card details; anything about the people who receive your emails from the emails themselves (a recipient who clicks the "Sent with signitur" link in a free-plan signature arrives on our website like any other visitor, and Section 7 applies to that visit); and anything else you do in the editor, dashboard, or account pages (the two steps reported from those pages are a click that opens our plans pop-up and the first time you copy your signature). Nothing tied to an account created before we started using these Meta tools, on October 15, 2026, is ever sent.

Meta keeps the information it receives under its own terms, for up to two years. Once information has been sent to Meta, we cannot recall it or delete it from Meta's systems; opting out stops anything further from being sent.

Aggregated information. We may share aggregated or de-identified statistics that cannot reasonably be used to identify any individual.

Legal requirements. We may disclose information where required by law, subpoena, court order, or other legal process, or where we reasonably believe disclosure is necessary to protect our rights, the safety of any person, or to investigate fraud.

Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

Google user data. Data obtained through Google APIs is never shared with third parties except as strictly necessary to deliver the functionality you requested, as required by law, or with your explicit authorization.

11. Retention and Deletion of Data

We retain data only as long as necessary to provide the Service, meet legal or regulatory obligations, resolve disputes, and enforce our agreements.

Deletion requests. You may request deletion of your personal data, including any Google user data, by emailing support@signitur.ai. Upon verification of your identity, we will delete the data within thirty (30) days unless retention is required for legitimate business or legal reasons, and we will tell you if that is the case. The data we delete includes the advertising records listed in the table above; information already sent to Meta is held by Meta under its own terms, and we cannot recall it or delete it from Meta's systems (see Section 10).

12. How We Protect Your Information

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, and destruction. These include:

• Encryption of data in transit using TLS 1.2 or higher;
• Encryption of data at rest for databases and stored files;
• Passwords stored only as salted PBKDF2-SHA256 hashes, never in recoverable form;
• Role-based access controls limiting employee access to what is needed for their role;
• Multi-factor authentication on administrative and infrastructure accounts;
• Logging and monitoring of administrative access;
• Regular application of security patches and dependency updates;
• Periodic review of access permissions and vendor security posture.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Breach notification. In the event of a data breach affecting your personal information, we will notify affected users and applicable regulators without undue delay and within the timeframes required by applicable law.

13. Your Rights

Subject to applicable law and verification of your identity, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your personal data, as described in Section 11;
• Port your data by receiving a copy in a structured, machine-readable format;
• Restrict or object to certain processing;
• Withdraw consent at any time where processing is based on consent;
• Opt out of marketing communications;
• Opt out of the sale or sharing of your personal information and of targeted advertising, as described below;
• Be free from discrimination for exercising any of these rights.

To exercise any right, email support@signitur.ai. We will respond within thirty (30) days, and will tell you if we need an extension permitted by law. An authorized agent may submit a request on your behalf with proof of authorization. To opt out of advertising you do not need to email us: the Your Privacy Choices page does it in one click.

Residents of California and other U.S. states with comprehensive privacy laws. Our use of the Meta Pixel and the Meta Conversions API (Sections 7 and 10) may be a "sale" or "sharing" of personal information as those terms are defined under the California Consumer Privacy Act as amended, and "targeted advertising" under other states' laws. The categories of personal information involved are identifiers (hashed email address, name, phone number, and account ID, with no email address sent for accounts created with Google Sign-In; IP address; cookie identifiers), internet or other electronic network activity (the pages and steps described in Sections 7 and 10), commercial information (the plan you looked at or chose, subscriptions you started, including free trials, their prices, and Stripe subscription IDs), and approximate location (country). They are disclosed to one category of third party: an advertising platform (Meta). We do not process sensitive personal information for purposes requiring a right to limit, and we do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. We do not collect, use, or sell personal data for the purpose of training large language models.

You can opt out of the sale or sharing of your personal information, and of targeted advertising, on our Your Privacy Choices page, or by using a browser or extension that sends a Global Privacy Control signal. If you are signed in, your choice is saved on your account and covers everything tied to it; if you are not, it applies to the browser you are using and to any account you later create, or check out with, in that browser (see Section 7). Opting out stops anything further from being sent and, if you are signed in, deletes the advertising matching data we store for your account; it cannot recall information already sent to Meta. We will not charge you a different price or give you a different level of service because you opted out. You may exercise your rights to know, delete, and correct through the address above, and you may appeal a denied request by replying to our response.

Residents of the European Economic Area and United Kingdom. Our lawful bases for processing are: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, service improvement), consent (marketing communications and non-essential cookies), and legal obligation (tax and compliance records). We do not load the Meta Pixel or send any information to Meta for visitors we detect outside the United States (see Section 7). You have the right to lodge a complaint with your local supervisory authority.

14. Children's Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children under 13, and we do not knowingly collect personal information from minors under 18 without appropriate consent.

If we learn that we have collected information from a child under 13, we will delete it promptly. Parents or guardians who believe we may hold such information should contact support@signitur.ai.

15. International Users

The Service is operated from the United States, and information we collect is processed and stored in the United States and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. We do not load the Meta Pixel or send any information to Meta for visitors we detect outside the United States (see Section 7).

Where we transfer personal data from the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, and we make those terms available to business customers on request. Payment data for customers in the EEA and United Kingdom is handled by Stripe Payments Europe, Ltd., established in Ireland, under Stripe's own data processing terms.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes affecting how we use your personal information, we will provide notice by email or through the Service at least fourteen (14) days before the change takes effect.

We encourage you to review this page periodically. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

17. Contact Information

Questions, requests, or complaints regarding this Privacy Policy may be directed to:

signitur
Central Media LLC
Orlando, Florida, United States
support@signitur.ai