Privacy Policy

Privacy Policy Operator: D3 REI, LLC, a New Jersey limited liability company doing business as SignREI ("SignREI," "we," "us," or "our") Platform: signrei.com and all related services (the "Platform") Effective date: June 22, 2026 This Privacy Policy explains how SignREI handles personal information in connection with the Platform. By using the Platform, you acknowledge this Policy. 1. Our role: controller and processor The Platform allows business customers ("Senders") to send documents to recipients ("Signers") for electronic signature. For personal information that a Sender uploads, sends, or processes through the Platform about its Signers and about its own transactions, the Sender is the controller (or business) and SignREI acts solely as the Sender's service provider and processor, handling that information only to provide the Platform and on the Sender's instructions. If you are a Signer, the Sender that sent you a document is responsible for its collection and use of your information and is your point of contact for most privacy rights regarding that document. We will direct or forward Signer requests to the relevant Sender where appropriate. For information we collect for our own purposes, such as account registration, billing, security, and operation of the Platform, SignREI acts as a controller. This Policy describes that processing. 2. Information we may collect We may collect the following categories of information. We collect only what we choose to collect to operate the Platform, and we are under no obligation to collect or retain any particular category or item: Identifiers and contact data: name, email address, postal address, phone number, account username, and similar identifiers. Sender account and commercial data: billing and payment information, company details, and records of your use of the Platform. Signer and transaction data: the email address to which a signing link is sent, the contents of Documents as transmitted, signature images or marks, the date and time of actions, and related signing data, all processed on behalf of the relevant Sender. Technical and device data: IP address, browser type, operating system, device identifiers, log data, access timestamps, and similar information generated automatically when the Platform is used. Communications: information you provide when you contact us. We reserve the right, but assume no obligation, to collect any additional information permitted by law where reasonably related to operating, securing, or improving the Platform. We do not require photo identification, government identity verification, or knowledge-based authentication, and we do not collect those unless we choose to in the future, in which case this Policy will be updated. Signature images are not collected or used as biometric identifiers. A typed or drawn signature is treated as a record of intent to sign, not as a biometric template, and we do not use it to identify any individual by unique biological characteristics. 3. How we may use information We may use information to: provide, operate, secure, and maintain the Platform; authenticate Signers and deliver signing links; transmit and complete Documents; process payments; communicate with Users; detect, prevent, and address fraud, abuse, and security incidents; comply with law and enforce our agreements; and for any other purpose disclosed at collection or permitted by law. We process Signer and transaction data only as needed to provide the Platform to the responsible Sender. 4. How we may disclose information We may disclose information: to the Sender on whose behalf we process Signer data; to the Signers a Sender designates; to third-party service providers that help us operate the Platform, bound to use it only for that purpose; to comply with law, legal process, or governmental request; to protect the rights, property, or safety of SignREI, our Users, or others; and in connection with a merger, acquisition, financing, or sale of assets. We do not sell personal information, and we do not share it for cross-context behavioral advertising. 5. Service providers We may use third-party service providers to host, send, secure, process, and support the Platform. The identity and configuration of these providers are proprietary and may change. Where required, we bind these providers by contract to protect personal information and to use it only to perform services for us. 6. Financial information Some Documents processed through the Platform may contain nonpublic personal financial information. Where the Gramm-Leach-Bliley Act or similar laws apply, we handle such information consistent with our role as a service provider to the responsible Sender and limit our use of it to providing the Platform. 7. Retention We retain personal information only for as long as we choose to, and only for as long as required to provide the Platform or to comply with law, after which we may delete it. We assume no obligation to retain any Document, signature, audit record, or other data, and we are not a system of record. Senders are solely responsible for downloading and independently retaining their executed Documents and any records they are required to keep. We are not liable for the deletion of, or inability to access, any data. 8. Your privacy rights Depending on where you live, you may have rights under laws including the California Consumer Privacy Act (as amended by the CPRA) and the comprehensive privacy laws of states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, New Jersey, Tennessee, Indiana, and others. Subject to those laws and applicable exceptions, you may have the right to: confirm whether we process your personal information and access it; correct inaccurate information; request deletion; obtain a portable copy; opt out of sale, sharing, or targeted advertising (note: we do not sell or share personal information for those purposes); limit use of sensitive personal information; and not be discriminated against for exercising your rights. How to exercise rights. Because we act as a service provider for Signer and transaction data, if your request concerns a document a Sender sent you, please contact that Sender directly; we will assist the Sender as required. For information we hold as a controller, contact us at sign@signrei.com. Requests for paper or non-electronic copies of a signed document are handled solely by the Sender that sent it; please direct those requests to the Sender. We will verify your request as required by law before responding and will respond within the timeframes the applicable law requires. You may use an authorized agent where the law permits. California "Shine the Light" and "Do Not Sell." We do not disclose personal information to third parties for their direct marketing purposes, and we do not sell personal information. 9. Security We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for the security of your own account, devices, and email. 10. Children The Platform is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us and we will take appropriate steps. 11. International users The Platform is operated in the United States and intended for use in the United States. If you access it from outside the United States, you consent to the processing of your information in the United States. 12. Changes to this Policy We may update this Policy at any time by posting the revised version with a new effective date. Your continued use of the Platform after the effective date constitutes acceptance. 13. Contact D3 REI, LLC dba SignREI 921 Pleasant Valley Ave, Suite 425 Mount Laurel, NJ 08054 sign@signrei.com