Privacy policy
This translation is provided for information only. Only the French version is legally binding.
What we want to be able to say, and what must remain accurate
We keep nothing beyond what the law requires or what the service needs, and the signed document is erased after seven days.
Two statements, on the other hand, would be false, and we do not use them:
- "no personal data" — the email address attached to a purchase is kept for ten years for the purposes of the invoice;
- "anonymous" — that purchase remains linked to an address.
What we can say, and what is accurate: no account, no password, nothing kept beyond what the law requires, and the document erased after seven days.
Data controller
LPH, société par actions simplifiée (French simplified joint-stock company), 9 avenue Maréchal Leclerc, 10120 Saint-André-les-Vergers, RCS Troyes 882 417 843.
Contact for any question about your data: support@1-signature.fr.
What we process, why, and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | Securing the journey, sending the signing link and the files | Performance of the contract | Erased when the transaction is closed |
| First name, surname | Producing the signature and the certificate | Performance of the contract | Erased when the transaction is closed |
| Mobile phone number | Authentication by one-time code, at the levels that require it | Performance of the contract | Erased when the transaction is closed |
| Uploaded PDF document | Transmitting it to the signature provider | Performance of the contract | Erased as soon as it has been transmitted; never stored unencrypted |
| Signed document, evidence file | Making them available to you | Performance of the contract | 7 days, encrypted at rest |
| Email address linked to a purchase | Invoicing | Legal accounting obligation | 10 years |
| Invoice, link between the purchase and the SignPass | Accounting obligation; reissuing a lost SignPass | Legal obligation | 10 years |
| Star movements | Traceability of top-ups and debits | Legitimate interest | Lifetime of the SignPass, then accounting archiving |
| Non-personal technical log | Support and handling of disputes | Legitimate interest | Beyond the availability period |
| Optional answer to the end-of-journey question: a rating or a reason, and a free comment | Improving the service | Legitimate interest | Recorded without your identity; the comment is erased after 12 months, the rating and the reason are kept for statistical purposes |
| Server access logs | Security | Legitimate interest | 12 months |
What we never keep, in any form: your SignPass code — only a cryptographic fingerprint of it is stored, from which it cannot be reconstructed — and the document to be signed beyond the transaction.
How your data is protected
- The uploaded document is encrypted as soon as it is received (AES-256-GCM), is never served from disk, and is erased as soon as it has been transmitted to the signature provider.
- The signed document and the evidence file are encrypted at rest, under random file names, outside any directory that is served directly.
- Download links carry a signed token that expires by itself; they cannot be enumerated.
- Encryption keys are not stored in the database.
- Communications are encrypted in transit (HTTPS).
Who else is involved
| Recipient | Role | Location |
|---|---|---|
| Goodflag | Trust service provider: signature, certificates, timestamping, evidence file | France |
| Stripe | Card payment processing | Ireland and United States |
| Scaleway | Email delivery | France |
| SMSmode | Text message delivery | France |
| IONOS | Hosting of the website and data | European Union |
Depending on the signature level chosen, an identity provider is involved to verify your identity: FranceConnect, France Identité or Identité Numérique La Poste. These checks take place on their own pages and under their own policies; we receive only the result.
Goodflag keeps its own evidence file, in accordance with its obligations as a trust service provider and for the periods that apply to it. That retention is independent of ours.
Transfers outside the European Union: payment processing by Stripe may involve a transfer to the United States, governed by the European Commission's standard contractual clauses and, where applicable, by the EU–US Data Privacy Framework.
Cookies
The website uses no advertising trackers and no audience measurement. It sets only two cookies that are strictly necessary for it to work:
- a session cookie, which links your journey to your browser;
- an anti-request-forgery token, which protects the forms.
These cookies are exempt from consent within the meaning of article 82 of the French Data Protection Act (loi Informatique et Libertés). That is why no banner is shown to you: there is nothing to accept or refuse.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability provided for by Regulation (EU) 2016/679 (the GDPR).
These rights are exercised by writing to support@1-signature.fr. We will reply within one month.
Two limits, which we prefer to state up front:
- the absence of an account makes identifying a request more difficult: we may ask you for information that allows us to link the request to a transaction or a purchase;
- data linked to an invoice cannot be erased before the legal ten-year term, as the accounting obligation takes precedence.
You may lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL, the French data protection authority) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, <https://www.cnil.fr>.
Changes
This policy may be changed. The applicable version is the one published on the website on the day of your visit.