This policy explains what personal data AMZE Studio (SMC-Private) Limited ("we") collects when you use SignAcctPro and our website, why, and the choices you have.
What we collect
- Account details: your name, email address, company name and the password you choose (stored only as a secure hash).
- Business data you enter: your clients' names and contact details, quotes, designs, files, jobs, invoices, payments, expenses and staff pay records. You control this data; we process it on your behalf to run the Service.
- Proof approvals: when your client approves a proof we record the name they type, their signature, the time, their IP address and browser, as evidence of the approval.
- Technical data: IP address, browser type and sign-in times, used for security and to keep the Service working.
- QuickBooks Online (only if you connect it): when you connect your QuickBooks company, Intuit gives us an access key for it. We keep that key encrypted and use it only to send the invoices, customers, payments and expenses you choose to QuickBooks, and to read your QuickBooks account and product lists so you can match them. We never see your QuickBooks password, and we do not read or store anything else from QuickBooks. You can disconnect at any time in SignAcctPro or in QuickBooks; we then delete the key.
- Stripe (only if you connect your own Stripe account): we keep your Stripe key encrypted and use it only to start a checkout for an invoice and to check whether it was paid. For each checkout we send Stripe the invoice number, the amount, your business name and, if you have it, your client's email address. Your client types their card details on Stripe's own page; we never see or store card numbers. You can disconnect at any time; we then delete the key.
- Billing: payments are handled by Paddle.com, our Merchant of Record. We do not see or store your card number. Paddle shares with us your plan, billing status and the country used for tax.
How we use it
To provide and secure the Service, to send emails you need (invitations, password resets, proofs and invoices you choose to send), to answer support requests, to bill your plan, and to meet legal duties. We do not sell personal data and we do not use your business data for advertising.
Contacts you add for outreach
If you use SignAcctPro to find business contacts, import a contact list, send emails, or send WhatsApp messages to your clients, those contacts are your records. We store them only to run the Service for you and never sell them or use them for our own marketing. You are responsible for having a lawful reason to contact them. When someone unsubscribes or asks not to be contacted, we add them to your shop's do-not-contact list so they are not messaged again from your account.
Cookies
We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies. Paddle's checkout uses its own cookies to process payments safely.
Who we share it with
Only with service providers that help us run SignAcctPro, under contracts that protect your data: our hosting provider (Hostinger), our email provider, and Paddle for payments. If you connect QuickBooks Online, the records you choose are sent to Intuit, under Intuit's own terms and privacy statement. If you connect your own Stripe account, checkout details are sent to Stripe, under your agreement with Stripe and Stripe's privacy policy. We may disclose data if the law requires it.
Where it is stored and how long
Data is stored on our hosting provider's servers. We keep your data while your account is open. After you close your account we delete it within 90 days, except records we must keep by law (for example billing records).
Security
Connections are encrypted (HTTPS), passwords are hashed, each company's data is kept separate, and sign-in attempts are limited. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects you.
Your rights
You can see and correct your data in the app, ask us for a copy of it, or ask us to delete it. Depending on where you live (for example under the GDPR in the European Union, the UK GDPR, Canada’s PIPEDA, Australia’s Privacy Act 1988 or the California Consumer Privacy Act) you may have more rights, such as to object to processing or to complain to a data protection authority. If you are a client of a sign shop that uses SignAcctPro, please contact that shop first; they control your data and we help them respond.
Children
SignAcctPro is a business tool and is not meant for anyone under 18.
Changes
We will post any change here and update the date above. If a change is significant we will tell account owners by email.
Contact
AMZE Studio (SMC-Private) Limited. Email: support@signacctpro.com. Or use our contact page.