Privacy Policy

1. What we collect

• Account data: your name, email and authentication details.
• Documents you upload and the fields, recipients and signatures attached to them.
• Signing evidence: IP address, browser user agent and timestamps for consent, viewing and signing events.
• Billing data processed by Paystack - we never store card numbers.

2. Why we collect it

To operate the service, to build the tamper-evident audit trail that makes electronic signatures defensible, to bill for paid plans and to send the transactional email the signing process requires. This is lawful processing to perform a contract and to pursue our legitimate interests in a secure, auditable service. We do not sell personal information, and we do not use your documents to train any model.

3. Responsible party and operator

For your account data, Bonang Technologies is the responsible party. For the contents of the documents you send, you (or your organisation) are the responsible party and we act as operator, processing that personal information only on your instructions. You are responsible for having a lawful basis to send each document and to involve each recipient.

4. Children's data

Lucid Signing is a business tool intended for users aged 18 and over. We do not knowingly create accounts for children. If a document you send happens to contain a minor’s personal information, you are responsible for obtaining any parental or guardian consent required under POPIA before sending it.

5. Storage and security

Documents and signatures are stored encrypted at rest, with access controlled per row at the database layer, and all traffic is protected with TLS. Signing links are unique per recipient, expire automatically and are invalidated after use. See our Security overview for detail.

6. Where your data is hosted

We use Supabase for our database and file storage and Paystack for payments. Depending on region configuration, some processing may occur on servers outside South Africa. Where personal information is transferred cross-border, we rely on the conditions in section 72 of POPIA, including that the recipient is subject to laws or binding agreements providing an adequate level of protection.

7. Retention

Executed documents and their audit trails are retained while your account is active, because their value is long-term evidence. You may delete drafts at any time and request deletion of your account data at info@lucidsigning.com.

8. Your rights

You may request access to, correction of, or deletion of your personal information, and object to certain processing. Contact our Information Officer at info@lucidsigning.com. You may also lodge a complaint with the Information Regulator of South Africa (enquiries@inforegulator.org.za).

9. Breach notification

If a security compromise affects your personal information, we will notify you and the Information Regulator as soon as reasonably possible after becoming aware of it, in line with section 22 of POPIA.

10. Information Officer

Information Officer: Angel Maile, Bonang Technologies, Eglin Road, Sandton, 2196, South Africa. Reach the Information Officer at info@lucidsigning.com or by post at the address above.