Privacy Policy & Trust Center
Your professional identity is sacred. Discover why thousands of businesses trust Signature Studio to secure their data, protect their privacy, and generate enterprise-grade email signatures.
Effective Date: November 14, 2026
Why Trust Signature Studio?
When you create an email signature, you are inputting sensitive corporate contact information. We engineered Signature Studio from the ground up with security-first, enterprise-grade architecture (ASP.NET Core & SQL Server) to guarantee your data never falls into the wrong hands.
- Strict Tenant Isolation: Your data is mathematically separated from all other users. You can never accidentally view or access another company's signatures (Zero IDOR vulnerabilities).
- No Generative AI Training: We use a local AI engine (Ollama) running on our own servers to assist in designing your signature. Your content is processed on our infrastructure and is never sent to a third-party AI provider or used to train AI models.
- We Never Sell Data: We are a SaaS platform, not a data broker. Your email addresses, phone numbers, and brand assets are strictly yours. We do not sell, rent, or trade your information.
1. Information We Collect
To provide our AI email signature generation services, we collect minimal necessary data:
- Account Data: Name, email address, and authentication credentials (hashed and salted via ASP.NET Core Identity).
- Signature Content: Contact details, job titles, social links, and profile photos you explicitly upload to construct your signature.
- Brand Assets: Logos and brand colors stored securely in your private Brand Kit.
- Billing Information: Processed securely via our compliant payment providers. We do not store full credit card numbers on our servers.
2. How We Protect Your Data
Security is built into our core framework. Our architecture utilizes Native ASP.NET Core MVC, meaning all data access and authorization happens entirely server-side.
- Encryption in Transit: All communications between your browser and our servers are encrypted using modern TLS (HTTPS) and strictly enforced HSTS policies.
- Encryption at Rest: Application databases and sensitive stored assets are encrypted at rest.
- Role-Based Access Control (RBAC): Only authorized team members and Super Admins within your organization can edit Official Master Signatures.
- Protection Against Web Threats: Built-in anti-forgery (CSRF) tokens, secure HTTP-only cookies, and robust Content Security Policies (CSP) prevent malicious client-side attacks.
3. AI Processing & Sub-processors
Design assistance runs on a local AI engine (Ollama) hosted on our own servers. The AI only receives design settings (colours, fonts, sizes and layout) - never your name, contact details, links or pictures - and nothing is sent to third-party AI providers or used for AI model training. Your designs and information remain your intellectual property.
4. Cookies and Tracking
We use cookies primarily for essential platform operations (e.g., keeping you logged in securely). We do not deploy invasive third-party behavioral trackers across our application workspace. The tracking we do use is strictly for functional analytics (understanding aggregate platform performance) and requires your consent where mandated by local law.
5. Your Data Rights
Depending on your jurisdiction (such as GDPR in Europe or CCPA in California), you maintain the right to:
- Request access to the personal data we hold about you.
- Request corrections to inaccurate data.
- Request permanent deletion of your account, signatures, and media assets ("Right to be Forgotten").
- Export your data in a portable format.
To exercise these rights, please reach out to our privacy team via our Contact page.
6. Policy Updates
We may update this Privacy Policy occasionally to reflect architectural enhancements or legal requirements. When we do, we will update the "Effective Date" at the top of this page.