Privacy Policy

Last updated: 13/10/2025

1. Introduction

Welcome to MyEnveloppe ("we", "our", "us"). We respect your privacy and are committed to protecting your personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable privacy laws. This Privacy Policy explains how we collect, use, store, and protect your information when you use myenveloppe.com, our web application, or related services (together, the "Service"). By using MyEnveloppe, you agree to this Privacy Policy.

2. Who we are

MyEnveloppe is a European digital signature service that allows users to send, sign, and manage documents electronically in compliance with eIDAS regulations. If you have any questions, you can contact us at: 📧 contact@myenveloppe.com

3. Data we collect

We collect only the data strictly necessary to provide the Service. a. Information you provide • Name, email address, company name (if provided) • Account credentials (encrypted) • Documents uploaded for signature • Signature fields, metadata, and audit trails • Billing and payment details (for paid plans) b. Information collected automatically • IP address and device information • Browser type and language • Usage logs (time of signature, IP, device info) • Cookies for authentication and analytics We do not sell, rent, or trade personal data.

4. Purpose of data processing

We process your data for the following purposes: • To create and manage your MyEnveloppe account • To send and manage signature requests • To generate audit trails and verify document integrity (SHA-256 hash) • To provide support and improve our Service • To comply with legal and security obligations

5. Legal basis

Our data processing is based on: • Contractual necessity — to deliver the signature service you requested • Legal obligations — under eIDAS and accounting laws • Legitimate interests — improving and securing our platform • Consent — for marketing communications (optional)

6. How we store and protect your data

• Data is stored on secure European servers (EU-based hosting). • All data is encrypted in transit (HTTPS) and at rest (AES-256). • Access is restricted to authorized personnel only. • We maintain daily backups and follow strong access control policies. Signed documents are: • Accessible for 3 months after signature completion, • Then archived securely for 10 years for legal traceability.

7. Sharing and third parties

We only share data with: • Trusted EU-based processors (hosting, payment, analytics) • Legal authorities, if required by law We never sell data to advertisers or third parties.

8. Your rights under GDPR

You have the right to: • Access your data • Request correction or deletion • Restrict or object to processing • Export your data (data portability) • Withdraw consent at any time To exercise your rights, contact: privacy@myenveloppe.com

9. Cookies

We use cookies only to: • Keep users authenticated • Measure anonymized usage metrics You can disable cookies in your browser, but this may limit functionality.

10. Data retention

We retain personal data only as long as necessary for the purpose it was collected. Audit trails and signed documents are stored for 10 years in accordance with eIDAS obligations.

11. Changes to this policy

We may update this policy periodically. The latest version will always be available at myenveloppe.com/privacy.

12. Contact

For any privacy-related questions: 📧 privacy@myenveloppe.com 📍 Hosted in the European Union