Privacy
WAPSOL GmbH operates this service and is the controller for the data described here.
What is stored, and why
- The documents a customer uploads, the sealed version and the evidence package, for as long as the customer's retention setting says.
- About a signer: name, email address, the language of the invitation, the time of each step, the IP address and the browser identification at the moment of signing, and the exact consent sentence agreed to. This is the evidence that the signature happened, and it is written into the evidence record, which cannot be changed afterwards.
- About an account holder: name, email address and company membership.
- When a document is checked at verify.onwyn.io: the fingerprint of the file and the verdict, kept for 24 hours. The file itself is never stored.
Who else sees it
The company that sent the document, and the signer. Email is delivered through the operator's mail provider. Nothing is sold, and nothing is used for advertising.
During the Beta, Onwyn staff can access documents in demo and client accounts to support and improve the service.
Demo accounts
A demo account stores what any account stores: the name and email address of each person in it, their password in a protected form that cannot be read back, the name of the company, the documents uploaded to it, the sealed versions and their evidence records. It also stores when you ticked the box on the signup form. When the demo period ends, the account can still be opened and everything in it can still be downloaded; sending and sealing are switched off. Nothing in a demo account is deleted automatically, neither when the demo ends nor later. To have a demo account and its documents deleted, ask us as described under "Your rights". A sealed document that somebody else holds can still be checked at verify.onwyn.io after that, because the check needs the file and not the account.
If you fill in the signup form and never follow the link in the email, no account exists. What you typed is deleted 7 days after the link has expired.
Your rights
You may ask for a copy of your data, for a correction, or for deletion. Evidence records are an exception: they exist to prove what happened and are kept for the retention period agreed with the company that sent the document.
A contact address for data protection requests is not published yet.