Privacy Notice

Information pursuant to Art. 13 GDPR.

This notice explains how Repsig handles personal data. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

1. This website

This site is currently a static pre-launch page. It uses no cookies, no analytics, no tracking pixels, and no third-party scripts. No personal data is intentionally collected through the page itself.

The hosting platform (AWS App Runner, region eu-central-1, Frankfurt) writes standard server access logs when you visit any URL. These logs include the request's IP address, timestamp, user-agent string, and requested path. The legal basis is our legitimate interest in operating and securing the site (GDPR Art. 6 (1) (f)). Logs are retained per AWS's default retention and are not used for marketing or profiling.

2. Browser extensions & desktop app (post-launch)

The planned email-client integrations, browser extensions, desktop app, and offline web app process documents entirely on your device. No files, signatures, or personal data are transmitted to any external server. Locally stored data (settings, signing certificates, signer name) remains in your browser's or app's local storage.

3. Signing server (post-launch)

The planned signing server, when operated, stores uploaded documents on the operator's infrastructure. If a third party operates the server, that party is the data controller for documents uploaded to their instance. Typical retention behavior:

• Documents expire and are automatically deleted (default: 31 days)
• Uploaders can delete their documents at any time via the private view link
• Per-document access logs (IP, timestamp, user-agent) are stored for security
• HTTPS encryption protects data in transit

4. Cookies

No cookies are set by this pre-launch website. If and when analytics or session-based features are introduced, an explicit consent banner will appear and no non-essential cookies will be set without your prior agreement.

5. Your rights under GDPR

• Right of access (Art. 15) — request a copy of your data
• Right to erasure (Art. 17) — request deletion of your data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to data portability (Art. 20) — export your data
• Right to object (Art. 21) — object to data processing
• Right to lodge a complaint with your local data protection authority

6. Data controller

Helge Rhodin
Contact: info@repsig.de
Based in Germany.

Last updated: 2026-06-25