Privacy Policy

Last updated 27 October 2026

This policy explains what personal data SignOff collects, why, and what you can do about it. SignOff is run by Tiny Tool Co., an individual seller based in the Philippines, which is the personal information controller for SignOff. If you have any question, email [email protected].

1. What we collect

• Your account: your name, email address and password. We never store your password itself, only a salted hash of it.
• Sign in sessions: when you log in, we store a hashed session token so you stay signed in, for up to 30 days or until you log out.
• Your work: the files and video links you add, project names, client names and revision settings.
• Your clients' input: the name a client types when they open a share link, their comments, and their Approve or Request changes decisions.
• Emails we send: a log of the alert emails we send you (who, when, the subject and whether it was delivered).
• IP addresses: we use IP addresses for a short time to limit abuse, such as too many sign ups from one place. These rate limit records are deleted once their time window ends, usually within an hour. Our hosting provider, Cloudflare, also processes IP addresses to deliver the site and protect it from attacks.
• Payments: when paid plans open, Lemon Squeezy collects your billing details. We receive things like your plan, the amount, and the country for tax, but never your full card details.

2. Why we use it

• To run SignOff: show your work to the people you share it with, keep comments with each version, count revision rounds and send you alerts.
• To keep accounts secure and stop abuse.
• To bill paid plans and keep the records the law requires.
• To answer you when you write to us.

We do not sell your data, and we do not use it for advertising.

3. Who processes it for us

• Cloudflare: hosting, database, file storage and sending alert emails.
• Lemon Squeezy: payments, tax and invoices, as Merchant of Record. Their own privacy policy covers the payment details they collect.

These providers may store data outside the Philippines. We only share what they need to do their job.

If you add a video link, the video is shown in a player from YouTube, Vimeo, Loom or Google Drive. When someone plays it, that service may collect data under its own privacy policy.

4. Cookies

SignOff uses one cookie: a sign in session cookie for freelancers who log in. For clients, the browser remembers a small reviewer key in local storage, so they do not have to type their name again. We do not use advertising cookies, analytics trackers or tracking pixels.

5. How long we keep it

• Your account and projects are kept until you delete them or close your account.
• When you delete a project, its files, versions, comments and share link are deleted.
• When you close your account, we delete your account and all your projects within 30 days. Short-lived backups may take up to a further 30 days to clear.
• Expired sessions and rate limit records are deleted automatically.
• Payment and invoice records are kept by Lemon Squeezy, and by us where tax law requires it.

6. Your rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to:

• be informed about how your data is used;
• access your data and get a copy of it;
• correct data that is wrong;
• object to processing, and ask us to delete or block your data;
• receive your data in a common format (data portability);
• be paid damages for harm caused by wrong or unauthorized use of your data;
• file a complaint with the National Privacy Commission.

To use any of these rights, email [email protected]. If you are a client who left comments on someone's project, you can also ask the freelancer who shared the link. We will reply within 30 days.

7. Keeping data safe

We use HTTPS everywhere, hash passwords and session tokens, make share links long and hard to guess, and let you turn off any link with "New link". No system is perfectly secure. If we learn of a breach that affects your data, we will tell you and the National Privacy Commission as the law requires.

8. Children

SignOff is a tool for working professionals and is not meant for children.

9. Changes

If we change this policy, we will update the date at the top. For important changes, we will email you or show a notice in the app first.

10. Contact

Tiny Tool Co., Philippines. Email [email protected].