Privacy policy & data transparency.

1. Scope and our role

This Privacy Policy explains how ZILLION DATA TECHNOLOGY CO., LIMITED (“ZILLION”, “we”, “us”) handles personal information when you use eSigner applications, websites, electronic-signature services and related support channels.

Depending on the service and relationship, we may act as the organisation responsible for your account information, or process document and participant data on behalf of the business that invited you to sign. That inviting business may have its own privacy notice.

2. Information we handle

Account and contact information

Name, telephone number, email address, account credentials, organisation details and communications preferences.

Identity and verification information

Where required for a signing workflow, this may include legal name, identification document information, verification results and related records. We apply the specific collection notice shown in the relevant workflow.

Agreements and signing records

Documents, form-field entries, signature images or marks, signer roles, timestamps, consent records, routing details and activity history needed to deliver and evidence the signing process.

Device, log and diagnostic information

Device model, operating-system and app version, IP address, device or installation identifiers, access time, interaction records, crash information and error logs used for security, reliability and troubleshooting.

Support information

Messages, contact details, screenshots or other materials you choose to send when requesting support or providing feedback.

3. Device permissions and optional features

eSigner may request access only when a feature needs it. You can manage permissions in your device settings; refusing a permission may make the related feature unavailable.

• Camera and photos: to scan a QR code or document, capture material, choose a profile image, or upload a signature or agreement file.
• Files and storage: to select, upload, download or retain agreement files at your request.
• Contacts: to help you select recipients when you choose to use this feature.
• Clipboard: to paste or recognise text that you deliberately use in a supported search or input flow.
• Notifications: to provide signing invitations, reminders and status updates.
• Device biometrics: where enabled, the operating system performs the biometric match. The service receives the success or failure result, not the underlying fingerprint or face template held by your device.

4. Why we use information

• Provide accounts, prepare and route agreements, enable signatures and maintain completion records.
• Verify identities or signing authority where a workflow requires it.
• Protect accounts, prevent abuse, investigate incidents and maintain service integrity.
• Operate, diagnose, maintain and improve the product and user experience.
• Respond to enquiries, complaints and data-rights requests.
• Meet contractual, legal, regulatory and record-keeping obligations.

We use an appropriate legal basis under applicable law, which may include performance of a contract, legitimate interests, compliance with law or your consent. Where consent is relied upon, you may withdraw it subject to applicable limitations.

5. When information is shared

We do not sell personal information. We may provide information to:

• The organisation, sender, recipients and authorised participants in the agreement workflow.
• Vetted service providers supporting hosting, communications, identity verification, security, analytics or customer support, subject to appropriate obligations.
• Professional advisers, regulators, courts or authorities where disclosure is required or reasonably necessary to protect legal rights, safety or service integrity.
• A successor or relevant party in a corporate transaction, subject to applicable safeguards.

6. Storage, transfer and retention

Information may be processed in locations where we or our service providers operate. When cross-border transfer rules apply, we use a recognised transfer mechanism or other appropriate safeguards.

We keep information only for as long as needed for the purposes described, the agreement owner’s instructions, dispute handling, security, and applicable legal or record-keeping requirements. Retention periods vary by record type and contractual arrangement.

7. Security

We use administrative, technical and organisational measures intended to protect information against unauthorised access, alteration, loss or disclosure. These measures are reviewed in light of the information, service and risk involved. No method of transmission or storage is completely secure; users should also protect account credentials and devices.

8. Your choices and rights

Subject to applicable law, you may ask to access, correct, delete or obtain a copy of personal information; object to or restrict certain use; or withdraw consent. You may also manage app permissions and notifications through your device.

Where we process agreement data for the business that invited you, we may refer your request to that business. To make a request, contact support@esigner8.com. We may need to verify your identity before responding.

9. Children

eSigner is intended for business and legally authorised agreement workflows. It is not directed to children who cannot lawfully provide the required consent or enter the relevant transaction. If you believe a child’s information was provided improperly, please contact us.

10. Updates and contact

We may update this policy to reflect service, legal or operational changes. Material changes will be communicated through an appropriate channel, and the date below will be revised.