Privacy policy for the esigner apps

One account per country

When you open the app for the first time, you choose your country. From then on the app works as that country's esigner website — esigner.no, esigner.dk, esigner.se, esigner.fi or esigner.de. Your account, documents, signatures, subscriptions and payments belong to that website, and its privacy policy applies in full to everything you do in the app.

An account on one country's website is separate from the others. Changing country in the app means signing in to a different website; nothing is moved between them. This page describes only what the app itself adds.

Camera and photos

If you scan a paper document, the app uses the camera to photograph the pages and turns the photos into a PDF on your phone. Only the PDF you choose to send is uploaded, exactly like a file uploaded on the website. If you add a picture from your photo library, only the picture you pick is read.

Contacts

When you add someone who is to sign, you can pick them from your contacts. Only the name, email address and phone number of the contact you pick are used, to fill in the form. Your contact list is never uploaded or stored by us.

Files shared to the app

If you share a PDF or Word file to esigner from another app, it is opened in the app and uploaded only when you send it for signing.

Notifications

If you allow notifications, the app tells you when someone has signed, when a document is complete and when your subscription is running low on signatures. To deliver them we store an identifier for your device with your account on the country website.

On iPhone and iPad that is the token Apple issues, and notifications are delivered through Apple Push Notification service. On Android the app generates its own identifier and secret, of which we keep only a one-way hash; notifications are delivered over our own connection, without Google Firebase. Notifications waiting for an Android device are deleted after 7 days if it never collects them, and 30 days after delivery.

Signing out of the app forgets the device, along with the documents it was following. You can also turn notifications off in your phone's settings at any time.

Stored on your phone

The app keeps the country you chose, your signed-in session and your settings on the device. Deleting the app removes them.

No tracking or advertising

The app shows no advertising and contains no analytics, advertising or tracking SDKs. The website's optional analytics are switched off inside the app, and we do not track you across other companies' apps or websites.

Payments

Where the app offers payment, it is the same payment as on the country's website and is covered by that website's privacy policy. If you buy through the App Store or Google Play, Apple or Google processes the payment; we receive a confirmation of the purchase, never your card details.

AI assistants (ChatGPT, Claude and others)

esigner can be connected to AI assistants such as ChatGPT and Claude, and to other apps that support the Model Context Protocol (MCP). When you connect, esigner.me picks the country from your IP address and your browser's language and passes the sign-in on to that country's website, where you sign in as usual and approve the connection — or choose another country first, if your account is elsewhere. Your IP address is used only for that choice and is not stored. esigner.me only forwards the sign-in and the assistant's requests and keeps no copy of your documents. The account, documents, signers and signatures belong to that country's website, and its privacy policy applies to them in full.

When you approve the connection, the assistant gets an access key valid for one hour and a renewal key valid for 30 days, renewed while you use the connection. We store only a one-way hash of each key, with the account and assistant it belongs to and when it was last used, and delete them automatically once they have expired. The assistant registers itself with its name and the addresses it returns to after sign-in; that registration holds no personal data.

The assistant sends us what you ask it to: the PDF, the signers' email addresses and the options for the signing. We handle them exactly like a document uploaded on the website. For every request we also record which action was used, whether it worked, how long it took, any error message, the order it concerned, the number of files and signers, the assistant's name and technical identifier, and the account — never the key itself. We keep these records for 12 months to run, secure and improve the service.

What you write in the chat, and what the assistant reads from our answers, is processed by the company behind the assistant — for example OpenAI for ChatGPT or Anthropic for Claude — under its own terms and privacy policy, as a separate controller. We do not receive your conversation.

On your country's website you can see every connected assistant under Account → Profile → Connected apps and remove its access at once. Removing esigner in the assistant's own settings stops the assistant using the connection; removing it on the website also revokes the keys.

Deleting your account

You can delete your account yourself, in the app or on the website — see Delete your account. Deleting the app does not delete your account.

Your rights

You have the right to access, correct, export and delete your personal data, and to object to processing. The country website's privacy policy describes how. Write to the support address of your country's website or to hei@esigner.no.

You can complain to the Norwegian Data Protection Authority (Datatilsynet), or to the data protection authority in the country where you live.