Privacy Policy
Who We Are
This service is operated by Idura ApS, Gl. Kongevej 3E, 1., 1610 København V. We provide a document signing service that enables individuals to send documents for legally-binding electronic signatures using national e-ID systems (BankID, MitID, etc.).
What Data We Collect
When You Send a Document for Signing (Requestor)
We collect your email address, billing information (processed securely through Stripe), and the documents you upload for signing. We also collect the names and email addresses of the individuals you assign as signers.
When You Sign a Document (Signer)
We collect your signature metadata, IP address, and timestamp of the signature. Note: We do not store your e-ID credentials. Authentication is handled securely by the e-ID provider (MitID, BankID, etc.) through our partner Idura.
How We Use Your Data
We use your data only to:
- Send SMS/email notifications about signing requests
- Enable you to track signing progress and download signed documents
- Process payments
- Comply with legal obligations
We do not:
- Sell your data to third parties
- Use your data for marketing without consent
- Profile your behavior
- Share your documents with anyone except the parties involved in signing
Third-Party Services
We use the following services to provide our product:
Data Storage & Security
- All data is stored in the European Union
- Documents are encrypted at rest
- All connections use HTTPS encryption
- Passkey authentication (no passwords stored)
- Signed download URLs with short expiry times
- Webhook communications are cryptographically signed to prevent tampering
Data Retention
- Active signing orders: Until all parties sign or order expires (14 days)
- Completed orders: 90 days from completion, then automatically deleted
- Expired/cancelled orders: 90 days from expiry, then automatically deleted
After the retention period, all associated data (documents, phone numbers, signing records) is permanently deleted.
Your Rights (GDPR)
Under GDPR, you have the right to access, correct, delete, or export your personal data. We will respond to requests within 30 days.
Cookies
We use only strictly necessary cookies for session management (keeping you logged in) and security (CSRF protection). We do not use analytics cookies, advertising cookies, or third-party tracking. Because our cookies are strictly necessary for the service to function, no cookie consent banner is required.
Contact Us
For privacy-related questions or to exercise your rights:
- Email: hello@idura.eu
- Address: Idura ApS, Gl. Kongevej 3E, 1., 1610 København V
This privacy policy complies with GDPR (EU) and applies to users in Denmark, Norway, Sweden, and Finland.