Privacy Policy

Personal Information We Collect Automatically. We may automatically collect personal information from you and your devices when you use our Services, including when you visit our websites or apps without logging in. 

We collect personal information about how you use our Services and the devices (e.g., computers, mobile phones, tablets) you use to access our Services. This may include, but is not limited to, the following:

• Device Data. This includes IP address, unique device identifiers, and device attributes, such as operating system and browser type.

• Usage Data. This includes web log data, referring and exit pages and URLs, platform type, number of clicks, domain names, landing pages, pages and content viewed and the order of those pages, the amount of time spent on particular pages, the date(s) and time(s) you used our Services, the frequency of your use of our Services, error logs, and other related information.

• Transactional Data. This includes IP addresses and authentication methods of parties to a transaction, subject line, history of actions that individuals take in connection with a transaction (e.g., review, sign, enable features), and information about those parties’ devices.

• Marketing and Advertising Data. This includes your interests based on your use of our Services and other websites and online services, preferences in relation to receiving marketing materials from us, communication preferences, and your preferences for particular products and services.

Some of the information we collect automatically is captured using cookies, which are text files containing small amounts of information that are downloaded on your device or related technologies, such as web beacons, local shared objects, and tracking pixels, to collect and/or store information.

Personal Information We Collect from Other Sources. Subject to applicable law, we may collect personal information about you from others, such as:

• Third-Party Sources. Examples of third-party sources include marketers, partners, researchers, affiliates , service providers, and others where they are legally allowed to share your personal information with us. For example, Department of Foreign Affiairs and Trade.

• Combining Personal Information from Different Sources. We may combine the personal information we receive from other sources with personal information we collect from you (or your device) and use it as described in this Notice.

Lawful Basis for Processing Your Personal Information. If applicable data protection law requires a lawful basis for processing, and where Notarily acts as a data controller, our lawful basis for collecting and using the personal information described in this Notice will depend on the type of personal information concerned and the specific context in which we collect or use it.

We normally collect or use personal information only where we need the personal information to perform a contract with you or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may have a legal obligation to collect or retain personal information or may need the personal information to protect your vital interests or those of another person. In certain circumstances, we may ask for your consent (separately from any contract between us) before we collect, use, or disclose your personal data. 

If we process sensitive personal information about you, as well as ensuring that one of the lawful bases referenced above applies, we will make sure that one or more of the grounds for processing sensitive personal information applies.

Note that in situations where Notarily acts as a processor, it is our customer who determines the appropriate legal basis associated with processing activities, and queries about the applicable lawful basis should be directed to them.

3. Disclosures of Personal Information

Subject to applicable law, including to the extent applicable law requires us to obtain consent, we may disclose personal information as follows:

• Service Providers. We disclose your personal information to service providers we use to support our Services. These companies provide services like intelligent search technology, intelligent analytics, advertising, authentication systems, bill collection, fraud detection, and customer support. We have contracts with our service providers with applicable privacy and data protection language and controls that require the safeguarding and lawful and proper use of your personal information.

• Affiliates. We may disclose your personal information to other companies under common ownership or control with Docusign. These companies use your personal information as described in this Notice. 

• Joint Marketing Partners. We may provide your personal information to sponsors of events, webinars, or sweepstakes for which you register, or other parties with whom we may engage in joint marketing activities.

• Advertising and Marketing Partners. We may allow third-party advertising and marketing technologies and parties that support our advertising and marketing efforts (e.g., ad networks, ad measurement services, advertising analytics providers, remarketing providers, etc.) on our marketing websites that use cookies and similar technologies to deliver relevant and targeted content and advertising to you on the marketing websites and other websites you visit and applications you use.

• Public or Government Authorities. We may disclose your personal information to comply with our legal obligations, regulations, or contracts, or to respond to a court order, administrative, or judicial process, such as a subpoena, government audit, or search warrant where we are legally compelled to do so. We also may disclose your information when there are threats to the physical safety of any person, violations of Docusign policies or other agreements, or to protect the legal rights of third parties, including our employees, users, or the public.

• Corporate Transactions. Your personal information may be disclosed or transferred to relevant third parties in the event of, or as part of the due diligence for, any proposed or actual reorganization, sale, merger, consolidation, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding). If a corporate transaction occurs, we will provide notification of any changes to the control of your information, as well as choices you may have.

• Consent. We may disclose your personal information in other ways if you have asked us to do so or have given consent. For example, with your consent, we post user testimonials that may identify you.

Your personal information may also be disclosed as described below:

• Other Docusign users. When you allow others to access, use, or edit content in your account, we provide that content to them. For example, if you send an envelope to others for review or signature, we make the contents of the envelope available to them.

• Payment Processors. When you make a payment to another user within our Services, we disclose your payment method details to the third-party payment processor selected by you.

• Public Information.

  • User-Generated Content. When you comment on our blogs or in our community forums, this information may also be read, collected, and used by others.

  • Profile Information. When you create a Docusign profile, other Docusign users can view your profile information. If you would like to make this information private, please visit your account settings.

• Your Employer or Organization. When you create an account or user role with an email address assigned to you as an employee, contractor, or member of an organization (e.g., yourname@youremployer.com or yourname@nonprofit.org), that organization (if it is a Docusign customer with certain features) can find your account and take certain actions that may affect your account.

4. Retention of Personal Information

We keep your personal information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain personal information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws as set out in our data retention policy and information handling standards. Generally, this means we retain your personal information to comply with any retention compliance obligations or statutory requirements or for purposes of performing a contract with you. Where there are technical limitations that prevent deletion or anonymization, we safeguard personal information and limit active use of it through implementing appropriate organizational technical and security measures.

5. Your Choices

This section describes many of the actions you can take to change or limit the collection, use, storage, or other processing of your personal information.

• Profile. You are not required to fill out a profile. If you do, you can access and review this personal information. If any personal information is inaccurate or incomplete, you can make changes in your account settings.

• Marketing Messages. You can opt out of email marketing messages we send you by clicking on the “unsubscribe” link in the email message or unsubscribe here (https://pref.docusign.com/preference-center). Please note that we may send you one message to confirm that you want to opt-out. If you are a registered user of our Services, or if you have engaged in transactions with us, we may continue to send transactional or relationship messages (e.g., signing notifications or account notifications) after you opt out of marketing messages.  If you would like your phone number added to our internal Do-Not-Call list to opt out of telemarketing messages, please contact us via the Docusign Privacy Request Portal. Please include your first name, last name, company, and phone number.  You can also let us know at any time, including during a telemarketing call, that you do not want to be called again for telemarketing purposes.

• Cookies and Other Related Technology. You can decline cookies through your browser settings or via the Docusign Cookie Preference Center and other methods detailed in our Cookie Notice (https://www.docusign.com/company/cookie-policy). However, if you decline cookies, you may not be able to use some parts of our Services.  Please note we do not recognize or respond to browser-initiated Do Not Track signals.

• Device and Usage Information. If you do not want us to see your device location, you can turn off location sharing on your device, change your device privacy settings, or decline to share location on your browser.

• Closing Your Account. If you wish to close your account, please log in to your account and edit your plan. For more information, click here: https://support.docusign.com/en/articles/How-do-I-cancel-or-downgrade-my-account.

• Complaints. We are committed to resolving valid complaints about your privacy and our collection, use, storage, or other processing of your personal information. For questions or complaints regarding our data use practices or this Notice, please contact us via the Docusign Privacy Request Portal.

6. Your Privacy Rights and Choices

Rights Regarding Your Personal Information. You may have certain rights related to your personal information, subject to local data protection laws, as described in more detail below. To exercise any of these rights, please contact us via the Docusign Privacy Request Portal​. 

• You also can request the following information: how we collect and use your personal information and why; the categories of personal information involved; the categories of recipients of your personal information; how we received your personal information and its source; our business purpose for using your personal information; and how long we use or store your personal information or the manner in which we determine relevant retention periods. 

• You have a right to correct inaccurate personal information about you, and you should notify us immediately if you believe the personal information we hold about you is inaccurate, incomplete, or out-of-date.

• In certain situations, you can ask that we erase or stop using your personal information, object to or restrict the use of your personal information, or export your personal information to another controller. 

• Where we rely on your consent to process your personal information, you have the right to decline consent and/or, if provided, to withdraw consent at any time. This will not affect the lawfulness of processing prior to the withdrawal of your consent. At any time, you can request that we stop using your personal information for direct marketing purposes. See Section 5 (“Your Choices”) of this Notice for more information on your choices.

• If you are unsatisfied with our response to your complaint, you have a right to raise questions or complaints with your local data protection authority at any time. 

• Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. If we deny your request, we will provide you with information on how to appeal the decision, if applicable, in our communications with you.

If you make a request to exercise the rights referenced above, we will require you to provide certain information for identity verification purposes. If you have an account with us, we may verify you through your login of your account. If you do not have an account with us, we may require you to provide additional information from which we can confirm your identity. You may authorize an agent to make a request to us on your behalf and we will verify the identity of your agent or authorized legal representative by either seeking confirmation from you or documents that establish the agent’s authorization to act on your behalf.

Certain personal information may be exempt from such requests under applicable law. We need certain types of personal information so that we can provide the product and Services to you. If you ask us to delete it, you may no longer be able to access or use our product and Services.

If you wish to exercise these rights, please contact us via the Docusign Privacy Request Portal.

Right to Opt-Out of Sales of Personal Information and Processing of Personal Information for Targeted Advertising Purposes. Depending on your jurisdiction, you may also have the right to opt out of “sales” of your information and “processing of your information for targeted advertising purposes.”

As explained in Section 3 (“Disclosure of Your Personal Information”) above, we sometimes disclose information to third-party partners that help us market our products and services to you across platforms. This disclosure of information may be considered a “sale” or “processing of your personal information for targeted advertising purposes” under applicable laws. 

If you would like to opt out of such “sales” or “processing” for targeted advertising purposes through cookies and similar online technologies, please click on the “Your Privacy Choices” link in our website footer.  Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit such requests on your behalf. Please note that we do not knowingly sell the personal information of minors under 16 years of age without legally-required affirmative authorization.

Please note that if you have a legally-recognized browser-based opt-out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.

8. How We Protect Your Personal Information

We have implemented appropriate technical, physical, and organizational measures to protect your personal information from misuse or accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, acquisition, or access, as well as all other forms of unlawful processing. To achieve this, we have developed and implemented an Information Security Management System and other sub-policies and guidelines relating to the protection of your personal information. For example, our staff is permitted to access customer personal information only to the extent necessary to fulfill the applicable business purpose(s) and to perform their job, subject to confidentiality obligations.

9. Changes to This Privacy Notice

We may amend this Notice to reflect changes in the law, our companies, our Services, our data processing practices, or advances in technology. Our use of the personal information we collect is subject to the Privacy Notice in effect at the time such personal information is used. Depending on the type of change, we may notify you of the change by posting on this page.