CodSign, developed by Codweb SAS (hereinafter "CodSign," "we," or "the platform"), is committed to protecting the privacy and personal data of its users. This Privacy Policy describes how we collect, use, store, and protect information when you use our electronic signature platform at codsign.co.
1. Information we collect
Account information: When you register, we collect your name, email address, phone number (optional), company name, and encrypted password.
Usage information: We log actions performed on the platform: documents created, signers added, documents signed or rejected, and dashboard access logs (IP, device, date, and result).
Signer information: When you send a document for signing, we collect the signer data you provide (name, email, phone). Signers do not need to register on CodSign.
Payment information: Payments are processed by external gateways (Wompi, PayPal). CodSign does not directly store credit card or banking information.
Cookies and browsing data: We use technical cookies necessary for platform functionality and analytics cookies (anonymous) to improve the experience. You can manage cookies from your browser settings.
2. How we use your information
We use the collected information to:
Service delivery: Send documents, notifications (email, SMS, WhatsApp), automatic reminders, and manage each document's lifecycle.
Security: Detect unauthorized access, prevent fraud, and maintain audit trail integrity.
Billing: Process payments, generate invoices, and maintain transaction history.
Product improvement: Analyze aggregated, anonymous platform usage to improve features and user experience.
Communications: Send you product updates, security alerts, or relevant information. You can unsubscribe at any time.
3. Sharing information with third parties
CodSign does not sell, rent, or share your personal information with third parties for advertising or commercial purposes. We share information only in the following cases:
Service providers: Companies that support our operations: payment gateways (Wompi, PayPal), cloud infrastructure, SMS and WhatsApp Business API providers. These providers only access information necessary to provide the service.
Legal requirements: When required by competent authorities, court orders, or to comply with applicable legal obligations in Colombia.
Business transfer: In case of merger, acquisition, or asset sale, data may be transferred to the new owner under the same privacy conditions.
4. Storage and security
Your information is stored on secure servers with restricted access. We implement the following security measures:
Encryption: All communications use HTTPS/TLS. Passwords are stored with secure hashing (bcrypt or equivalent).
Access control: Role-based access (Administrator / Collaborator) with an audit log of every action.
Strong authentication: 2FA (two-factor authentication) support with apps like Google Authenticator.
Access logs: Log of all logins with IP, device, and result for detecting unauthorized access.
Retention: We retain documents and associated data while your account is active. Upon account deletion, data is deleted or anonymized within 90 days, unless legally required to be retained.
5. Your rights
Under Colombian Law 1581 of 2012 (Personal Data Protection) and Decree 1377 of 2013, you have the following rights regarding your data:
Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Deletion: Request deletion of your personal data, unless there is a legal obligation to retain it.
Objection: Object to the processing of your data for specific purposes, such as marketing communications.
Portability: Receive your data in a structured, machine-readable format.
To exercise any of these rights, write to contacto@codweb.co with the subject "Personal data rights."
6. Cookies
Technical cookies: Necessary for platform functionality (session, authentication). Cannot be disabled.
Analytics cookies: Used to understand how users interact with the platform (anonymous, aggregated data). Can be disabled from your browser.
Third-party cookies: Some integrated services (payment gateways, support) may set their own cookies subject to their privacy policies.
7. Minors
CodSign is not directed at individuals under 18. We do not intentionally collect data from minors. If we discover we have collected data from a minor without parental consent, we will delete it immediately.
8. Changes to this policy
We may update this Privacy Policy periodically. When we do, we will update the "last updated" date and, for significant changes, notify you via email or a prominent notice on the platform.
9. Contact
If you have questions or wish to exercise your personal data rights, contact us:
Company: Codweb SAS
Email: contacto@codweb.co
WhatsApp: +57 300 279 7089
Location: Medellín, Antioquia, Colombia