Privacy Policy

This Privacy Policy applies to the FormEsque website, applications, customer review and signing pages, invoice pages and related support. It does not cover an organization's independent practices or third-party sites.

For information a customer organization places in its workspace, that organization generally determines the purpose and means of processing and FormEsque acts as its service provider or processor. Account, billing, security and service-usage information may be processed by FormEsque for its own operational purposes.

The information processed depends on how the service is used.

• Account and organization data, including names, business contact details, user identifiers, roles, invitations and workspace settings.
• Customer and document data, including proposals, contracts, invoices, templates, addresses, line items, uploaded files, signatures and related evidence supplied by an organization or recipient.
• Transaction and delivery metadata, including document status, timestamps, message identifiers, delivery events, payment-status records and audit activity.
• Technical and security data, including IP-derived request information, browser and device information, session records, logs, errors and abuse-prevention signals.
• Communications and support information provided when a person contacts FormEsque.

We process information to provide and secure the service, follow authorized customer instructions, authenticate users, maintain tenant boundaries, create and deliver documents, support signatures and invoices, troubleshoot failures, prevent abuse, communicate service information and satisfy legal obligations.

• Operate, maintain, personalize and improve FormEsque.
• Protect accounts, investigate incidents and preserve audit evidence.
• Send transactional messages requested by an authorized organization.
• Enforce agreements, manage plans and comply with lawful requests.
• Analyze aggregated or de-identified operational trends that do not identify a customer or recipient.

Where a legal basis is required, processing may rely on performance of a contract, legitimate interests in operating and securing the service, consent, or compliance with law. The applicable basis depends on the context and jurisdiction.

Document recipients seeking to exercise rights over content controlled by a FormEsque customer should contact that organization first. We will assist customers with appropriate requests and may need to verify identity and authority before acting.

We do not sell personal information or use workspace document content for third-party behavioral advertising. Information may be disclosed to authorized workspace members, intended document recipients, subprocessors that support the service, professional advisers, parties to a business transaction, or authorities when legally required.

Subprocessors are contractually limited to their service role and are listed on the Subprocessor page. Optional features only send data to the relevant provider when the feature is used.

Information is retained for the period needed to provide the service, preserve transaction evidence, comply with law, resolve disputes and enforce agreements. Account configuration and active workspace content normally remain while the account is active. Unsigned records may be deleted through supported controls; signed records and related audit evidence may be archive-only.

Deletion from an active system does not immediately remove copies from disaster-recovery backups. Backup copies age out according to provider and operational schedules and are not restored for ordinary customer access. See the Data Retention and Backup policies for more detail.

FormEsque uses administrative, technical and organizational safeguards designed for the nature of the service, including authenticated access, server-side authorization, tenant-scoped records, transport encryption, restricted service credentials and audit records. No system can guarantee absolute security.

Providers may process information in the United States and other locations where they operate. When required, organizations are responsible for determining whether appropriate transfer mechanisms or contractual terms are needed for their use.

Depending on location, individuals may have rights to access, correct, delete, restrict or object to processing, receive portable information, withdraw consent or appeal a decision. Rights are subject to verification, legal exceptions and the customer's role as controller.

Users can update certain account and workspace information through the service. Recipients may contact the organization that sent a document. Privacy questions and rights requests can be initiated through the public FormEsque support form or the privacy contact identified in the applicable account or service agreement.

FormEsque is a business service and is not intended for children under 18. We do not knowingly solicit children's personal information.

We may update this policy as the service, providers or law changes. We will post the new date and provide additional notice for material changes when required. Questions can be initiated through the public FormEsque support form or the support channel identified in the applicable account or service agreement.