Privacy Policy

Account and contact details (name, business name, email, phone); the business data you enter (customers, quotes, jobs, invoices, suppliers, files); usage and device data (log data, IP address, browser); and payment details, which are handled by our payment provider — we don't store full card numbers.

To provide and secure the Service, process payments, provide support, improve the product, and send service and account communications. We use it only for the purposes it was collected for or a related purpose you'd reasonably expect.

We use established third-party providers to run Sign OS — for hosting, the database and authentication, file storage, payments and email. We don't name them here: publishing the exact stack is free reconnaissance for anyone looking for a way in. If you need the detail for vendor due diligence, email us and we'll tell you directly.

Where you connect an integration such as Xero, MYOB, QuickBooks or your email provider, data is shared with that service at your direction. We don't sell your personal information.

When you use ReAct or another AI feature, the request and the shop information needed for that task are sent through OpenRouter to the model provider used for that feature. Processing may take place outside Australia. Your staff permissions limit what ReAct can access.

We do not fine-tune a model on your shop records. We keep assistant activity and feedback to investigate mistakes and test improvements. Ratings do not automatically train a shared model. Email us (address below) if you want your shop excluded from feedback evaluation.

If you connect an outside assistant, the information you allow is sent to that assistant’s provider under its terms. That connection is read-only; it does not run ReAct on your outside subscription. Review the information you allow before connecting it.

If you connect Google Drive, Sign OS can see only the folders and files it creates in your Drive and the files you pick for it, plus the email address of the Google account you connect. It uses that access to make a folder for each quote and job and to copy your job files into them. Sign OS never deletes anything from your Drive.

We don't use information from your Google Drive for advertising, we don't sell it, and we don't use it to train AI models. Sign OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time from Files & sync in Sign OS, or remove Sign OS's access in your Google account; everything already in your Drive stays where it is.

If you connect OneDrive or SharePoint, Sign OS asks Microsoft for access to the files your Microsoft account can reach, and the list of your SharePoint sites, plus your name and email address. It uses that access only inside the folder you choose: to make a folder for each quote and job, copy your job files into them, and bring files your team adds there onto the job. Sign OS never deletes anything from your OneDrive or SharePoint.

We don't use your files for advertising, we don't sell them, and we don't use them to train AI models.

You can disconnect at any time from Files & sync in Sign OS, and your Microsoft 365 admin can remove Sign OS's access at any time; everything already in your OneDrive or SharePoint stays where it is.

If you add the Sign OS panel to Gmail, it can read only the email you have open while the panel is showing: its subject, sender and text. It never sees the rest of your inbox, your labels or your contacts. Sign OS uses that email to find job and quote numbers in it, and keeps a copy only when you or the panel file it onto a job or quote, so your team can see it there. An email you only read is not kept.

We don't use information from your Gmail for advertising, we don't sell it, and we don't use it to train AI models. Sign OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Filed emails are kept for as long as your shop's email settings say. You can sign out of the panel at any time, or remove Sign OS's access in your Google account.

Your job files, artwork and proofs are stored in Australia — held in a provider's Oceania region and copied nightly to a second, separate provider in Sydney.

The database is currently hosted in Tokyo, the closest region our database provider offered when we set up. Moving it to Sydney is planned. We take reasonable steps to ensure our providers protect your information to a comparable standard.

We use tenant isolation, encryption in transit, access controls and role-based permissions to protect your data. No system is perfectly secure, but we work to protect information from misuse, loss and unauthorised access.

We keep your information while your account is active. Once it closes, we delete it 30 days later — automatically, and for expired trials the same as paid accounts. The 30 days are so you can change your mind or ask for a copy.

Staff logins are removed with the shop. Anyone who also belongs to another shop keeps their login there. Ask us to delete sooner and we will. We may keep a limited record where the law requires it.

You can request access to, or correction of, the personal information we hold about you, and raise a privacy concern, by emailing us. We'll respond within a reasonable time. You can also complain to the Office of the Australian Information Commissioner (OAIC) if you're not satisfied with our response.

We use essential cookies to keep you signed in and to run the Service. We don't use them to build advertising profiles.

We may update this policy; material changes will be notified in-app or by email. For any privacy question or request, email Show email address.