Privacy policy

1. Who we are

EmailSignatured is made by Filos Strategy Μονοπρόσωπη Ι.Κ.Ε., a single-member private company registered in Athens, Greece. For anything in this policy — questions, requests, complaints — email hello@emailsignatured.com.

2. What we collect, and why

• Your email address — collected when you sign in, so we can send you a magic sign-in link and know which account is yours. We never see or store a password, because there isn't one.
• The signature content you type — name, job title, phone numbers, links and similar fields you fill in the editor — stored so your saved signatures are there next time you open the editor.
• Photos and logos you upload — stored so they can be shown in the signatures you build with them. We keep the original picture you picked as well as the cropped copy, so you can change a photo's shape or size later without uploading it again, and we store a fingerprint of each file's contents so uploading the same picture twice doesn't store it twice.
• Team and organization data — if you use a team or agency account, we store the organization's name, its members and their roles, and any shared branding or template settings, so the account works as a team.
• Campaign link-click counts — if your organization runs a promotional banner inside signatures, a click on that banner's link is logged as one count against the campaign so the organization can see how many people clicked. We store a one-way hashed, shortened version of the visitor's IP address and browser identifier for basic abuse protection — not the actual IP address, and nothing that identifies who opened the email.
• Errors, when something breaks — if a page or an action fails, we log what went wrong so we can fix it: the error message, the page it happened on (the address only, never the part of a link that carries a token), your browser and version, and your account id if you were signed in. Email addresses and anything that looks like a key are stripped out before it is written. These records are kept for 30 days and then deleted automatically. Nobody outside our own team can read them.

We don't run ads, and right now we don't use any third-party analytics tool on the site — no Google Analytics, no tracking pixels, nothing watching you around the product. If that ever changes, we'll update this section first.

3. Local drafts and cookies

Before you sign in, the text you type in the editor lives only in your own browser's local storage — not on our servers — until you sign in or save it, at which point it's attached to your account and stored the same way as everything else. Pictures are the exception: a photo or logo is uploaded to our storage the moment you add it, because that's the only way it can appear in an email, and it's held under a temporary anonymous account until you sign in (see the next section). We use a small amount of browser storage to remember things like your light or dark preference. We don't set advertising or third-party tracking cookies.

4. How signing in works

Signing in uses a passwordless “magic link” sent to your email through Supabase, our authentication provider — there's no password to create, remember or leak. Before you sign in, some actions (like uploading your first photo) quietly open a temporary anonymous session so your work isn't lost. When you sign in with your email, anything you uploaded under that temporary session is transferred to your real account, and we keep a small record linking the two so those files stay yours — without it your own uploads would become unreachable to you. We don't currently offer sign-in via Google or any other third-party account.

5. How your signature images are served

Signatures reference images through our own domain, which simply points at where the file is actually stored — a doorway, not a logbook of who walked through it. When someone opens an email carrying your signature, their mail client loads the image the same way it loads any image on the web. We don't run read-receipt tracking, we don't log who opened your emails, and we don't attach any tracking pixel to your signature.

Images you've used in a signature are kept even after you delete that signature, and that is deliberate: an email you sent last year still points at them, and deleting the file would put a broken image into mail we can't reach. Deleting a signature removes the signature; it doesn't reach into inboxes. If you want an image itself taken down, email us and we'll remove it — knowing it will then stop appearing in mail already sent.

6. Who else processes your data

Running EmailSignatured means a few specialist companies process data on our behalf, under their own data-processing terms:

• Supabase — our database, authentication and file-storage provider. Your account, signature data and uploaded images live on Supabase's cloud infrastructure.
• Vercel — hosts the website and its content-delivery network.
• Stripe — our payments provider. When you buy a paid plan, Stripe processes the payment details directly and we never see or store your card number. If you have never paid us, Stripe holds nothing about you.
• An email-delivery provider (future) — to send magic sign-in links and account emails; today this runs through Supabase's built-in email delivery.

We don't sell your data to anyone, for any reason.

7. How long we keep your data

We keep your account and signature data for as long as your account exists. You can delete an individual signature yourself, any time, from your dashboard — images it used are kept, for the reason in section 5. Error records are deleted automatically after 30 days. For a full account deletion, or a copy of everything we hold on you, email hello@emailsignatured.com and we'll handle it by hand — we're working toward making this fully self-serve.

8. Your rights under GDPR

Because EmailSignatured is operated from Greece and available to people across the EU, you have the rights the GDPR gives you over your own data: to access it, correct it, erase it, restrict or object to how it's used, and receive a copy in a portable format. Email hello@emailsignatured.com for any of these and we'll respond without undue delay. If you think we've mishandled your data, you can also complain directly to the Hellenic Data Protection Authority, the Greek supervisory authority, at dpa.gr.

EmailSignatured isn't directed at children, and we don't knowingly collect data from anyone under 15.

9. Changes to this policy

If we change what we collect or how we use it, we'll update this page and move the “last updated” date above. For anything material, we'll try to flag it more prominently than that.