Privacy policy
In effect from 30 August 2026. Last updated 20 October 2026.
What we collect, why, who else touches it, and how to get it back or get rid of it.
What's in here
1Who we are
Signature Dash is operated by Legacy Networks Pty Ltd (ABN 57 660 541 257), based in Melbourne, Australia. Postal address: PO Box 6187, Melbourne, Victoria 3004, Australia.
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). We commit to those principles whether or not the Act's turnover threshold currently applies to us.
2Two kinds of people
This matters, because we treat them differently.
Account holders. People who sign in and build signatures. We hold an account for them.
People who install a signature from a share link. They open a link, type their own name and contact details, install the signature, and that is the end of it. They get no account, no password and no marketing from us. The details they type belong to the business whose link they used — we hold that information on that business's behalf.
3What we collect
| What | From whom | How we get it |
|---|---|---|
| Email address | Account holders | You type it to sign in |
| Name, job title, company | Account holders | You type it into a signature |
| Name, title, email, phone numbers | People installing from a share link | They type it themselves |
| Images you upload | Account holders | Logos, banners, photos |
| Name, email and message | Anyone using our contact form | They type it themselves; it is emailed to us, not stored |
| Billing name, email, address | Paying customers | Collected by Stripe, not by us |
| Server logs — IP address, browser, pages | Everyone visiting | Automatically, as with any website |
We do not ask for and do not want: government identifiers, health information, or anything else of that kind. Please do not put it in a signature.
4Why we collect it
- To sign you in — your email address is how you sign in.
- To build and serve your signatures — the details are the signature.
- To take payment and to tell you about your account.
- To keep the service running — diagnosing faults, preventing abuse.
- To reply to you when you email us or use our contact form.
We do not sell personal information. We do not share it for anyone else's advertising. We do not send marketing email to people who installed a signature from a share link.
5Card details
We never see your card number. Payments go directly to Stripe, who are PCI DSS Level 1 certified. We receive a record that a payment succeeded and the email address it was made under. Nothing else.
6Who else touches it
We are a small business and we use established suppliers rather than running everything ourselves. Each of these can technically access data in the course of providing their service:
| Supplier | What they do for us |
|---|---|
| Supabase | The database and sign-in system |
| Vercel | Hosts the application at app.signaturedash.com and the signaturedash.com website |
| Cloudflare | Serves signature images, and sits in front of our website |
| Resend | Sends sign-in links and account email |
| Stripe | Takes payments |
| Anthropic | Suggests design improvements. Receives design settings only, never contact details |
We will also disclose information if the law requires it. If that ever happens and we are permitted to tell you, we will.
7Where it is stored
Your account data stays in Australia. The database — your email address, your signature designs, the details people type into share links — is hosted by Supabase in Sydney.
Two things do leave the country, and you should know which. Images are stored with Cloudflare and served from their network worldwide; that is the whole point of a content network, so a copy of your logo may sit on a server close to whoever is reading the email. Payment and email go through Stripe and Resend, who operate internationally.
Where information is processed outside Australia, we choose suppliers who commit to protecting it to a comparable standard.
8How long we keep it
- While your account is open — your designs, images and account details.
- After you ask us to close your account (the workspace owner can ask from the Account page, or by email) — deleted within 30 days of your request, including stored images, except where we must keep records for tax or accounting purposes, which in Australia is generally five years.
- Server logs — a short rolling window, then discarded.
9Your rights
You can ask us to:
- show you what personal information we hold about you;
- correct anything that is wrong;
- delete it, where we are not required to keep it;
- send it to you in a portable format.
Email hello@signaturedash.com and we will respond within 30 days. There is no charge.
If you installed a signature from somebody's share link and want your details removed, you can ask us — but the quickest route is usually to ask the business whose signature it is, since it is their account and their design.
10Cookies and tracking
The application uses a sign-in cookie to remember that you are signed in. That is a necessary cookie and the product does not work without it.
Our marketing website sets no advertising or analytics cookies. Cloudflare may set a cookie to tell genuine visitors from automated traffic. We do not run Google Analytics, advertising pixels or third-party trackers, and there is nothing here that follows you to other websites.
Signature Dash does not put tracking pixels in your signatures. We do not measure whether emails your team sends are opened.
11Keeping it safe
- Everything travels over encrypted connections.
- Access to data is enforced in the database itself, not just in the interface — an anonymous visitor cannot read any table, and we test that by trying.
- Sign-in is by one-time email link or code, or a password you choose, with optional two-step sign-in and passkeys. More on our security page.
- Card numbers never reach our systems.
No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
12Children
Signature Dash is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe we have, tell us and we will delete it.
13Changes
If we change this policy in a way that materially affects you, we will email account holders at least 30 days beforehand. The date at the top always shows the current version.
14Complaints
Email hello@signaturedash.com and we will look into it and reply within 30 days.
If you are not satisfied with how we handle it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.