[{"data":1,"prerenderedAt":521},["ShallowReactive",2],{"options:asyncdata:2lc7fjildez3h":3},{"page":4,"pages":511},{"id":5,"title":6,"body":7,"description":501,"extension":502,"label":6,"meta":503,"navigation":504,"order":505,"path":506,"seo":507,"stem":508,"updated":509,"__hash__":510},"legal\u002Flegal\u002Fprivacy.md","Privacy Policy",{"type":8,"value":9,"toc":477},"minimark",[10,19,22,27,34,59,72,75,79,82,150,153,157,162,176,180,191,195,206,210,215,219,222,264,268,271,305,309,316,320,323,369,377,380,383,387,394,397,401,404,408,414,420,423,427,430,434,443,447,450,460,470,474],[11,12,13,14,18],"p",{},"Priva6 is a project from ",[15,16,17],"strong",{},"SASU PDFShift",", a French simplified joint-stock company with its registered office at 128 rue La Boétie, 75008 Paris, France (\"PDFShift\", \"we\", \"us\"). Priva6 is a software-as-a-service platform to draft, send and electronically sign legal documents (the \"Service\"), available at priva6.com, app.priva6.com and sign.priva6.com.",[11,20,21],{},"We take privacy seriously: Priva6 is designed to collect only what the Service requires, with no tracking, no advertising and no analytics.",[23,24,26],"h2",{"id":25},"what-this-privacy-policy-covers","What this Privacy Policy covers",[11,28,29,30,33],{},"This policy explains how we process personal data ",[15,31,32],{},"as a data controller",", that is:",[35,36,37,45,52],"ul",{},[38,39,40,41,44],"li",{},"data about our ",[15,42,43],{},"customers and their team members"," (the people who create a Priva6 workspace or are invited to one);",[38,46,47,48,51],{},"data about ",[15,49,50],{},"visitors"," of our website priva6.com;",[38,53,54,55,58],{},"data about people who ",[15,56,57],{},"contact us",".",[11,60,61,62,65,66,71],{},"When our customers use Priva6 to send documents to their own clients, the data of those clients and signers is processed by us ",[15,63,64],{},"on behalf of the customer, as a processor",". The customer (the organization that sent the document) is the controller of that data and its own privacy policy applies. How we handle that data is described on our ",[67,68,70],"a",{"href":69},"\u002Flegal\u002Fgdpr","GDPR page",", and signers are informed by the privacy notice linked from every signing page.",[11,73,74],{},"This policy does not cover third-party websites linked from the Service.",[23,76,78],{"id":77},"personal-data-we-collect","Personal data we collect",[11,80,81],{},"We only collect the data needed for the purposes described below:",[83,84,85,98],"table",{},[86,87,88],"thead",{},[89,90,91,95],"tr",{},[92,93,94],"th",{},"Category",[92,96,97],{},"Examples",[99,100,101,110,118,126,134,142],"tbody",{},[89,102,103,107],{},[104,105,106],"td",{},"Contact information",[104,108,109],{},"Name, email address, phone number, position",[89,111,112,115],{},[104,113,114],{},"Account and workspace data",[104,116,117],{},"User ID, password (stored hashed by our authentication provider), role (admin, editor or reader), organization name, address, country, VAT number, website, logo",[89,119,120,123],{},[104,121,122],{},"Sign-up requests",[104,124,125],{},"Company name, name and email address entered on the sign-up form, and the review decision",[89,127,128,131],{},[104,129,130],{},"Content you add",[104,132,133],{},"Documents, annexes, email templates, your clients' details and the signatures collected through the Service",[89,135,136,139],{},[104,137,138],{},"Operation data",[104,140,141],{},"IP address, dates and times of access, technical logs, API key usage (date of last use)",[89,143,144,147],{},[104,145,146],{},"Communications",[104,148,149],{},"The emails you send us and our replies",[11,151,152],{},"Priva6 does not process payment card data.",[23,154,156],{"id":155},"why-we-process-your-data-and-on-what-legal-basis","Why we process your data, and on what legal basis",[158,159,161],"h3",{"id":160},"to-provide-the-service-performance-of-a-contract","To provide the Service (performance of a contract)",[35,163,164,167,170,173],{},[38,165,166],{},"create and manage your workspace and your team members' accounts;",[38,168,169],{},"review sign-up requests, then send account confirmation, invitation and password-reset emails;",[38,171,172],{},"host your documents, send them for signature, generate the signed PDFs and audit trails, and send the related emails;",[38,174,175],{},"provide the API and support.",[158,177,179],{"id":178},"for-our-legitimate-interests","For our legitimate interests",[35,181,182,185,188],{},[38,183,184],{},"keep the Service secure: rate-limit sign-ups and sending, prevent fraud and abuse, investigate incidents;",[38,186,187],{},"improve the Service from the feedback you send us;",[38,189,190],{},"manage our business relationship with you and tell you about important changes to the Service.",[158,192,194],{"id":193},"to-comply-with-our-legal-obligations","To comply with our legal obligations",[35,196,197,200,203],{},[38,198,199],{},"keep accounting and tax records;",[38,201,202],{},"answer lawful requests from public authorities;",[38,204,205],{},"comply with export control laws and trade sanctions.",[158,207,209],{"id":208},"with-your-consent","With your consent",[35,211,212],{},[38,213,214],{},"only where we explicitly ask for it (for example, to send you news about other PDFShift products). You can withdraw your consent at any time.",[23,216,218],{"id":217},"how-long-we-keep-your-data","How long we keep your data",[11,220,221],{},"We keep personal data only as long as necessary for the purpose it was collected for, taking into account its nature, its sensitivity and our legal obligations:",[35,223,224,238,243,249,255,261],{},[38,225,226,229,230,233,234,237],{},[15,227,228],{},"Unconfirmed accounts"," are deleted after 7 days; ",[15,231,232],{},"sign-up attempts"," used for rate limiting after 30 days; ",[15,235,236],{},"sign-up requests"," after 90 days.",[38,239,240,242],{},[15,241,114],{}," is kept while your account is active, then deleted or anonymised, except what we must keep by law.",[38,244,245,248],{},[15,246,247],{},"Signed documents and their audit trails"," are kept as long as the organization that sent them keeps its Priva6 account, and cannot be altered: they are legal records. Unsigned documents are kept until you delete them.",[38,250,251,254],{},[15,252,253],{},"Accounting records"," are kept for 10 years, as required by French law.",[38,256,257,260],{},[15,258,259],{},"Technical logs"," are kept for a limited period for security purposes.",[38,262,263],{},"Our email provider keeps the content of emails for 45 days.",[23,265,267],{"id":266},"who-we-share-your-data-with","Who we share your data with",[11,269,270],{},"We do not sell your personal data. We only share it with:",[35,272,273,285,292,298],{},[38,274,275,276,279,280,284],{},"our ",[15,277,278],{},"service providers"," (subprocessors), who process it on our behalf and under our instructions, such as hosting, email delivery and PDF generation. The full list, with their location and purpose, is published on our ",[67,281,283],{"href":282},"\u002Flegal\u002Fsubprocessors","Subprocessors page",";",[38,286,287,288,291],{},"the ",[15,289,290],{},"recipients you choose",": the clients you send documents to receive your organization's name and the sender's name, and every party to a signed document receives the signed PDF and its audit trail;",[38,293,294,297],{},[15,295,296],{},"public authorities"," when the law requires it;",[38,299,300,301,304],{},"a ",[15,302,303],{},"successor"," in the event of a merger, acquisition or sale of all or part of our business, which would be bound by this policy.",[23,306,308],{"id":307},"international-transfers","International transfers",[11,310,311,312,315],{},"Priva6's database and files are hosted in the European Union. Some of our providers are located, or may access data, outside the European Economic Area (for example, our email provider in the United States). These transfers are covered by the European Commission's adequacy decisions (such as the EU-US Data Privacy Framework for certified companies) or by the ",[15,313,314],{},"Standard Contractual Clauses"," adopted by the European Commission, so that your data keeps a level of protection equivalent to the GDPR.",[23,317,319],{"id":318},"your-rights","Your rights",[11,321,322],{},"Under the GDPR and applicable laws, you have the right to:",[35,324,325,331,341,347,353,360,366],{},[38,326,327,330],{},[15,328,329],{},"access"," your personal data and obtain a copy of it;",[38,332,333,334,337,338,284],{},"have it ",[15,335,336],{},"rectified"," if it is inaccurate, or ",[15,339,340],{},"erased",[38,342,343,346],{},[15,344,345],{},"restrict"," its processing;",[38,348,349,352],{},[15,350,351],{},"object"," to processing based on our legitimate interests;",[38,354,355,356,359],{},"receive it in a portable format (",[15,357,358],{},"data portability",");",[38,361,362,365],{},[15,363,364],{},"withdraw your consent"," at any time, where processing is based on consent;",[38,367,368],{},"give instructions on what happens to your data after your death (French law).",[11,370,371,372,376],{},"You can update most of your data directly in Priva6 (Settings). For any other request, write to ",[67,373,375],{"href":374},"mailto:privacy@priva6.com","privacy@priva6.com",". We may ask you to prove your identity, and we answer within one month.",[11,378,379],{},"Some rights are limited where the data is needed as evidence: for example, a signature and its audit trail cannot be erased while the signed document is kept.",[11,381,382],{},"If you are a signer or a client of one of our customers, please contact the organization that sent you the document first: it is the controller of your data. We will forward any request we receive to them.",[23,384,386],{"id":385},"security","Security",[11,388,389,390,58],{},"We maintain appropriate technical and organizational measures to protect personal data: encrypted connections, data isolation between organizations, secrets stored only as fingerprints, a separate domain for signing pages, a hash-chained audit log and restricted access for our staff. These measures are described on our ",[67,391,393],{"href":392},"\u002Fsecurity","Security page",[11,395,396],{},"However, no system connected to the Internet is fully secure, and we cannot guarantee that a leak will never happen. You are responsible for keeping your password and API keys confidential.",[23,398,400],{"id":399},"minors","Minors",[11,402,403],{},"The Service is intended for professionals and is not directed at people under 18. If we learn that an account was created by a minor, we close it and delete the related data promptly.",[23,405,407],{"id":406},"cookies-and-local-storage","Cookies and local storage",[11,409,410,413],{},[15,411,412],{},"priva6.com"," sets no cookies and uses no analytics or advertising tools. It only stores your light\u002Fdark theme choice in your browser's local storage, if you make one.",[11,415,416,419],{},[15,417,418],{},"The Priva6 app"," stores your authentication session in your browser's local storage. This is strictly necessary to keep you signed in and cannot be disabled. The app sets no tracking, analytics or advertising cookies.",[11,421,422],{},"Signing pages store nothing in your browser beyond what is needed to display the document.",[23,424,426],{"id":425},"do-not-track","\"Do Not Track\"",[11,428,429],{},"As we don't track you, there is nothing to turn off: our behavior is the same whether or not your browser sends a \"Do Not Track\" signal.",[23,431,433],{"id":432},"california-residents","California residents",[11,435,436,437,440,441,58],{},"If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know the categories of personal information we collect, their sources, the purposes for which we use them and the categories of third parties we share them with (all described above), to request a copy or the deletion of your personal information, and not to be discriminated against for exercising these rights. ",[15,438,439],{},"We do not sell or share personal information"," for cross-context behavioral advertising. To exercise your rights, write to ",[67,442,375],{"href":374},[23,444,446],{"id":445},"contact-and-complaints","Contact and complaints",[11,448,449],{},"For any question about this policy or your personal data, contact us:",[35,451,452,457],{},[38,453,454,455],{},"by email: ",[67,456,375],{"href":374},[38,458,459],{},"by mail: SASU PDFShift, Privacy, 128 rue La Boétie, 75008 Paris, France",[11,461,462,463,469],{},"If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the ",[67,464,468],{"href":465,"rel":466},"https:\u002F\u002Fwww.cnil.fr",[467],"nofollow","CNIL",", or the authority of your country of residence in the European Union.",[23,471,473],{"id":472},"changes-to-this-policy","Changes to this policy",[11,475,476],{},"We may update this policy to reflect changes to the Service or the law. The date of the last update is shown at the top of this page. If the changes are significant, we will notify our customers by email or in the Service before they take effect.",{"title":478,"searchDepth":479,"depth":479,"links":480},"",2,[481,482,483,490,491,492,493,494,495,496,497,498,499,500],{"id":25,"depth":479,"text":26},{"id":77,"depth":479,"text":78},{"id":155,"depth":479,"text":156,"children":484},[485,487,488,489],{"id":160,"depth":486,"text":161},3,{"id":178,"depth":486,"text":179},{"id":193,"depth":486,"text":194},{"id":208,"depth":486,"text":209},{"id":217,"depth":479,"text":218},{"id":266,"depth":479,"text":267},{"id":307,"depth":479,"text":308},{"id":318,"depth":479,"text":319},{"id":385,"depth":479,"text":386},{"id":399,"depth":479,"text":400},{"id":406,"depth":479,"text":407},{"id":425,"depth":479,"text":426},{"id":432,"depth":479,"text":433},{"id":445,"depth":479,"text":446},{"id":472,"depth":479,"text":473},"How SASU PDFShift collects, uses and protects personal data when you visit priva6.com or use Priva6.","md",{},true,1,"\u002Flegal\u002Fprivacy",{"title":6,"description":501},"legal\u002Fprivacy","2026-10-19","A4YArPg1D4G_2h-iVOHF2plVoi-BOcVRl_ZjMj659xg",[512,513,516,518],{"path":506,"label":6,"order":505},{"path":514,"label":515,"order":479},"\u002Flegal\u002Fterms","Terms of Service",{"path":69,"label":517,"order":486},"GDPR",{"path":282,"label":519,"order":520},"Subprocessors",4,1792403317561]