SignForce

Privacy Policy

Last updated: 29-07-2026

This Privacy Policy explains how NSIQ INFOTECH (“we”, “us”) collects, uses, stores and protects information when you use SignForce, our electronic signature and document generation application for Salesforce (the “Service”).

SignForce runs inside your own Salesforce organisation. Agreement records, signer details and audit history are stored in your Salesforce org, under your control. We do not operate a separate copy of your agreements.

1. Information we process

Category	Examples	Why
Document content	Agreements, templates, generated and signed PDFs	To generate, deliver, stamp and store the documents you send
Signer details	Name, email address, role, signing order	To deliver the signing request and identify who signed
Signature evidence	Signature image, IP address, browser user agent, timestamps, consent acceptance, certificate id	To produce a legally meaningful audit trail and Certificate of Completion
Account details	Salesforce user and organisation identifiers, sender name and email	To attribute actions and send notifications
Integration tokens	OAuth access and refresh tokens for connected storage providers	To upload completed documents to the storage you connected

We do not use your document content or signer data for advertising, and we do not sell it.

2. Google user data

SignForce can optionally connect to Google Drive so completed documents are filed in your own Drive. This connection is entirely optional and only happens when you explicitly authorise it.

What we access

Creating files and folders in the Drive account you connect, to store generated and signed documents.
Reading files SignForce created, to attach or preview them.
Sharing settings on files SignForce created, to produce a link you can open.
Listing your top-level folders, so you can choose where SignForce should file documents.

What we do not do

We do not read, index, or analyse files that SignForce did not create.
We do not use Google user data to train generalised artificial intelligence or machine learning models.
We do not transfer Google user data to third parties except as needed to provide the Service, or where required by law.
We do not sell Google user data.

Limited Use disclosure. SignForce’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect Google Drive at any time from the SignForce administration screen, which deletes the stored tokens. You may also revoke access directly at myaccount.google.com/permissions. Files already placed in your Drive remain yours and are unaffected.

3. Microsoft OneDrive

Where you connect Microsoft OneDrive instead, the same principles apply: we create and manage only the files SignForce places there, and access can be revoked at any time from the SignForce administration screen or from your Microsoft account settings.

4. Where information is stored

Salesforce — agreements, signers, fields, audit events and, depending on size, documents are stored in your own Salesforce organisation.
Document processing service — larger documents and rendering artefacts are stored in cloud object storage operated on our behalf, in the region configured for your deployment.
Connected storage — where you connect Google Drive or OneDrive, completed documents are additionally written to that account, which you control.

5. Retention

Agreements, audit events and documents remain in your Salesforce organisation until you delete them. Deleting an agreement removes its related signers, fields, audit events and files. Integration tokens are deleted when you disconnect the provider. We retain operational logs for a limited period for security and troubleshooting.

6. Security

Data is transmitted over TLS.
Signed documents are fingerprinted with a SHA-256 hash so alteration can be detected.
Signing links use single-use, expiring tokens bound to a session.
Access inside Salesforce is governed by your own profiles, permission sets and sharing rules.

7. Sub-processors

We rely on the following service providers to deliver the Service:

Salesforce — application platform and primary data storage.
Amazon Web Services — document conversion, stamping and object storage.
Google and Microsoft — only where you connect their storage services.

8. Your rights

Depending on your location, you may have the right to access, correct, export or delete personal information we hold, and to object to or restrict certain processing. Because most data resides in your own Salesforce organisation, these requests are usually fulfilled directly by your Salesforce administrator. For anything else, contact us using the details below.

9. Children

The Service is intended for business use and is not directed at children under 16. We do not knowingly collect information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date above, and where appropriate we will notify you through the Service.

11. Contact

Questions about this policy or about how your information is handled:

Email: nihar.sharma@esignforce.com
Company: NSIQ INFOTECH