Privacy Policy
Last updated: September 1, 2026
1. Overview
EmailSignatureKit (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website (emailsignaturekit.com) and use our email signature generator services.
2. Information We Collect
- Account Information: When you sign in via Google OAuth or Magic Link, we collect your email address and basic profile details to create and secure your account.
- Signature Data: Information you input into the signature builder (such as name, job title, company, phone number, and social links). Anonymous drafts remain strictly stored on your local device until you explicitly choose to save them to your account.
- Payment Information: All payment transactions are securely processed by our merchant of record partner, Creem. We never store your full credit card numbers or financial credentials on our servers.
3. How We Use Your Information
We use the collected information exclusively to:
- Provide, operate, and maintain the EmailSignatureKit application;
- Sync and store your customized email signatures across your devices;
- Process transactions and grant lifetime Pro license access;
- Send essential transactional notifications (such as sign-in links and purchase receipts).
4. Data Storage and Security
We employ industry-standard encryption protocols (TLS/HTTPS in transit and AES-256 at rest) via our cloud database infrastructure (Supabase/PostgreSQL) with strict Row-Level Security (RLS) policies. Only you have permission to access and modify your private signatures.
5. Third-Party Services
We integrate with trusted service providers to deliver our services:
- Supabase: User authentication and cloud data storage;
- Google OAuth: Secure third-party sign-in authentication;
- Resend: Transactional email delivery;
- Creem: Payment processing and merchant of record services;
- Google Analytics 4 & PostHog: Privacy-conscious product analytics, page-view aggregation, and diagnostic user experience replays.
6. Web Analytics & Privacy Protection
To continually diagnose rendering issues and improve editor usability, we utilize privacy-focused analytics tools (Google Analytics and PostHog).
- Input Masking & Data Minimization: In user session replays, all textual form inputs (including phone numbers, personal names, email addresses, and disclaimers) are strictly masked and obfuscated at the browser level before transmission to prevent any Personally Identifiable Information (PII) from being captured.
- No Ad Tracking: We never sell your telemetry data to third-party data brokers or advertising networks. Telemetry is utilized solely for technical debugging, Core Web Vitals monitoring, and workflow improvements.
7. Your Rights & Data Deletion
You have the right to access, export, or permanently delete your account and all associated signatures at any time directly from your Account dashboard or by contacting us.
8. Contact Us
If you have questions about this Privacy Policy, please contact us at support@emailsignaturekit.com.