Privacy policy

1. Who we are

EmailSignatured is made by Filos Strategy Μονοπρόσωπη Ι.Κ.Ε., a single-member private company registered in Athens, Greece. For anything in this policy — questions, requests, complaints — email hello@emailsignatured.com.

2. What we collect, and why

• Your email address — collected when you sign in, so we can send you a magic sign-in link and know which account is yours. We never see or store a password, because there isn't one.
• The signature content you type — name, job title, phone numbers, links and similar fields you fill in the editor — stored so your saved signatures are there next time you open the editor.
• Photos and logos you upload — stored so they can be shown in the signatures you build with them.
• Team and organization data — if you use a team or agency account, we store the organization's name, its members and their roles, and any shared branding or template settings, so the account works as a team.
• Campaign link-click counts — if your organization runs a promotional banner inside signatures, a click on that banner's link is logged as one count against the campaign so the organization can see how many people clicked. We store a one-way hashed, shortened version of the visitor's IP address and browser identifier for basic abuse protection — not the actual IP address, and nothing that identifies who opened the email.

We don't run ads, and right now we don't use any third-party analytics tool on the site — no Google Analytics, no tracking pixels, nothing watching you around the product. If that ever changes, we'll update this section first.

3. Local drafts and cookies

Before you sign in, whatever you build in the editor lives only in your own browser's local storage — not on our servers — until you sign in or save it, at which point it's attached to your account and stored the same way as everything else. We use a small amount of browser storage to remember things like your light or dark preference. We don't set advertising or third-party tracking cookies.

4. How signing in works

Signing in uses a passwordless “magic link” sent to your email through Supabase, our authentication provider — there's no password to create, remember or leak. Before you sign in, some actions (like uploading your first photo) quietly open a temporary anonymous session so your work isn't lost; that session becomes your real account the moment you sign in with your email, and anything you already uploaded moves with it. We don't currently offer sign-in via Google or any other third-party account.

5. How your signature images are served

Signatures reference images through our own domain, which simply points at where the file is actually stored — a doorway, not a logbook of who walked through it. When someone opens an email carrying your signature, their mail client loads the image the same way it loads any image on the web. We don't run read-receipt tracking, we don't log who opened your emails, and we don't attach any tracking pixel to your signature. If you delete a signature or your account, its images stop being served — including in emails you've already sent, since we can't reach into someone else's inbox.

6. Who else processes your data

Running EmailSignatured means a few specialist companies process data on our behalf, under their own data-processing terms:

• Supabase — our database, authentication and file-storage provider. Your account, signature data and uploaded images live on Supabase's cloud infrastructure.
• Vercel — hosts the website and its content-delivery network.
• Stripe (future) — if we introduce paid plans, Stripe will process payment details directly — we never see or store your card number ourselves.
• An email-delivery provider (future) — to send magic sign-in links and account emails; today this runs through Supabase's built-in email delivery.

We don't sell your data to anyone, for any reason.

7. How long we keep your data

We keep your account and signature data for as long as your account exists. You can delete an individual signature yourself, any time, from your dashboard. For a full account deletion, or a copy of everything we hold on you, email hello@emailsignatured.com and we'll handle it by hand — we're working toward making this fully self-serve.

8. Your rights under GDPR

Because EmailSignatured is operated from Greece and available to people across the EU, you have the rights the GDPR gives you over your own data: to access it, correct it, erase it, restrict or object to how it's used, and receive a copy in a portable format. Email hello@emailsignatured.com for any of these and we'll respond without undue delay. If you think we've mishandled your data, you can also complain directly to the Hellenic Data Protection Authority, the Greek supervisory authority, at dpa.gr.

EmailSignatured isn't directed at children, and we don't knowingly collect data from anyone under 15.

9. Changes to this policy

If we change what we collect or how we use it, we'll update this page and move the “last updated” date above. For anything material, we'll try to flag it more prominently than that.