Data Processing Addendum

For personal data that you upload or generate through SignNexa about your team members, contacts, or other individuals, you act as the data controller and Royal Freelancing acts as the data processor. Royal Freelancing processes that data only to provide the service and on your documented instructions (which include your use of the product's features).

• Subject matter - provision of the SignNexa email signature, public-page, and monitoring service.
• Duration - for the term of your account, plus the retention periods described in our Privacy Policy.
• Nature and purpose - hosting, storing, displaying, transmitting, and otherwise processing your content to operate the service.
• Categories of data subjects - your team members, contacts, and any individuals whose details you include in signatures, profiles, pages, or monitored assets.
• Types of personal data - names, business email addresses, phone numbers, job titles, photographs and logos, social and website links, and domain/email monitoring data. We do not require special categories of personal data.

• Process personal data only on your documented instructions, including for international transfers, unless required by law (in which case we will inform you where legally permitted).
• Ensure personnel authorised to process personal data are bound by confidentiality.
• Implement appropriate technical and organisational security measures (see section 6).
• Assist you, taking into account the nature of processing, in responding to data-subject requests.
• Assist you with security, breach notification, and data protection impact assessments.
• Delete or return personal data at the end of the service, per section 7.
• Make available information necessary to demonstrate compliance with this DPA.

You authorise Royal Freelancing to engage the sub-processors used to run SignNexa, which currently include Hostinger (hosting, United Kingdom), Cloudflare (storage, CDN, and email routing, Western Europe), Amazon Web Services (email delivery via SES), Brevo / Sendinblue (email delivery, European Union), Microsoft (email), Google (tag management via Google Tag Manager, website analytics, and performance tooling), and Stripe (payment processing for paid subscriptions). We impose data-protection obligations on each sub-processor equivalent to those in this DPA, and we will give notice of any intended change so you can object on reasonable data-protection grounds. The current list is described in our Privacy Policy.

Providers that process SignNexa's own website-visitor and account data - such as our analytics and cookie-consent providers and the social-login providers - relate to processing where Royal Freelancing acts as controller, not to the Customer data governed by this DPA, and are covered by our Privacy Policy.

Personal data is primarily stored in the United Kingdom and the European Union. Where a sub-processor processes personal data outside the UK/EEA (for example in the United States), such transfers rely on appropriate safeguards such as Standard Contractual Clauses and, where applicable, certification under the EU-US and UK-US Data Privacy Framework.

We maintain technical and organisational measures appropriate to the risk, including TLS in transit, Argon2id password hashing, server-side sessions with CSRF protection, access controls, rate-limiting, and encrypted backups. These measures are described further in our Privacy Policy.

On termination of your account, we delete or return the personal data we process on your behalf in line with our Data Deletion Instructions, except where retention is required by law. Content that belongs to a workspace you do not own remains with its owner.

We will notify you without undue delay after becoming aware of a personal data breach affecting the personal data we process on your behalf, and provide information reasonably available to help you meet your own notification obligations.

This DPA is governed by the laws of India, consistent with our Terms of Service, and does not limit any mandatory data-protection rights that apply to you. Questions or requests for a signed copy: hello (at) signnexa.com.