Privacy Policy

Beezifi Inc. ("Beezifi," "we," "us," or "our") operates the Agreement e-signature and document workflow platform ("Agreement" or the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use Agreement.

1. Information We Collect

Account Information

When you register, we collect your name, email address, password (stored as a bcrypt hash — never in plaintext), organization name, and billing details.

Document and Signature Data

Agreement is built around your documents. We store the documents you upload, the agreement content you create using our AI builder, recipient information (names, email addresses), signature data (drawn or typed), audit trail events (IP address, timestamp, device), and completion certificates.

Usage and Technical Data

We collect server access logs (IP address, browser type, request path, timestamp), feature usage analytics, and error diagnostics to operate and improve the Service. This data is processed in aggregate where possible.

Billing Data

Payment card details are processed directly by Stripe and are never stored on our servers. We retain billing records (plan, amount, date) for accounting and legal compliance.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Agreement Service
• Process transactions and send related notices
• Send product updates, security alerts, and support messages
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Generate anonymized, aggregate statistics about service usage

We do not sell your data. We do not use your document content or signature data to train machine learning models.

3. Sharing and Disclosure

We share your information only in the following circumstances:

• Service providers: Third-party vendors (Stripe for payments, AWS for hosting, SendGrid for email) that process data on our behalf under data processing agreements
• Agreement recipients: When you send a document for signature, recipient information is shared with those recipients as part of the service
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger or acquisition, with notice to you
• With your consent: Any other sharing requires your explicit authorization

Your organization's workspace data is fully isolated — no data is ever shared between organizations.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service.

• After cancellation: Your workspace data is preserved for 30 days for recovery, then permanently and irreversibly deleted
• Backup snapshots: Deleted within 90 days of account termination
• Authentication logs: Retained for up to 12 months for security purposes
• Billing records: Retained for up to 7 years to meet financial and legal compliance requirements
• Completed agreement audit trails: Retained for the duration of your subscription and the 30-day grace period thereafter

You may request earlier deletion of your personal data subject to our legal retention obligations — see Your Rights below.

5. Security

We implement industry-standard technical and organizational measures to protect your data, including TLS 1.2+ encryption in transit, bcrypt password hashing, per-organization database isolation, two-factor authentication, and comprehensive audit logging. For a full description of our security practices, see our Security page.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention obligations)
• Portability: Export your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request that we restrict processing in certain circumstances

To exercise these rights, email privacy@beezifi.com. We respond to all requests within 30 days. For detailed GDPR-specific rights, see our GDPR page.

7. Cookies and Tracking

We use essential cookies to maintain your authenticated session and remember your preferences. We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, though this may affect Service functionality.

8. International Data Transfers

Beezifi Inc. is based in the United States. If you access Agreement from the European Economic Area, United Kingdom, or other regions with data transfer restrictions, your data is transferred to the US under appropriate safeguards. EU/EEA customers may request a Data Processing Agreement (DPA) at privacy@beezifi.com.

9. Children's Privacy

Agreement is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, for significant changes, by email. Your continued use of Agreement after the effective date constitutes acceptance of the updated policy.

11. Contact Us