Privacy Policy
This Privacy Policy (hereinafter referred to as the "Policy") describes what data is collected and how it is processed by the online service "SigCleaner" (hereinafter referred to as the "Service") on the sigclean.io website when the User uses its functions.
Use of the Service constitutes the User's unconditional consent to this Policy and the conditions of processing their personal information specified therein; in case of disagreement with these conditions, the User must refrain from using the Service.
1. General Provisions
1.1. The processing of the User's personal data is carried out in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of the RS No. 87/2018), and, where applicable, with Regulation (EU) 2016/679 (GDPR).
1.2. This Policy applies to the processing of personal data obtained both before and after the Policy enters into force.
1.3. In accordance with applicable law, the User has the right to request access to their personal data, its rectification, erasure, restriction of processing, as well as to object to processing and request data portability. To exercise these rights, please contact: support@sigclean.io.
2. What Information We Collect
2.1. Within the framework of this Policy, the User's personal information is understood as:
- Data provided directly by the User: name, email address — upon registration and subsequent use of the Service.
- Uploaded images: photographs and scans of seals, stamps, and signatures that the User uploads for processing. Processed files are stored on the Service's servers and are available to the User in their personal account.
- Data transmitted automatically: the network address of the device, information about the browser and operating system, date and time of access to the Service.
- Session identifier — a technical identifier for maintaining an authorized session.
- Preferred interface language.
2.2. The Operator does not request and does not store passwords, payment details, or bank data.
3. Purposes of Processing
3.1. The Operator collects and stores only the information necessary to provide the Service and ensure its security. The User's personal data is processed for the following purposes:
- Identification and authentication of the User (login via a one-time code sent to email).
- Provision of the Service's functionality: receiving, processing, and storing uploaded images, delivering the result.
- Communication with the User: sending one-time login codes (transactional emails).
- Ensuring security and protection against abuse, including limiting the number of requests to the Service.
- Maintaining logs of requests to the Service for diagnosing technical errors.
- Statistical research based on anonymized data (traffic analytics).
4. Data Transfer to Third Parties
4.1. The Operator keeps the Users' personal information confidential and does not transfer it to third parties, except in cases necessary for the functioning of the Service. In order to provide the Service, Users' data may be transferred to the following categories of processors:
- cloud computing and AI service providers — for the automatic processing of uploaded images;
- email service providers — for the delivery of transactional messages;
- web analytics services — for collecting anonymized traffic statistics;
- hosting providers — for storing data and ensuring the operation of the Service.
4.2. Certain processors may be located outside the Republic of Serbia or the European Economic Area. In such cases, data transfer is carried out on the basis of standard contractual clauses or other mechanisms recognized by applicable data protection legislation.
4.3. The Operator has the right to disclose personal information upon an official request from a court or competent authority in cases provided for by applicable law.
5. Cookies
5.1. The Service uses the following cookies:
sessionId— active session identifier; necessary for User authentication. Storage period — 1 year.lang— preferred interface language selected by the User. Storage period — 1 year.
5.2. The Service does not use LocalStorage to store user data and does not set any other first-party cookies.
5.3. Third-party analytics services may set their own analytical cookies. The User has the right to disable cookies in their browser settings; however, blocking sessionId will make authentication in the Service impossible.
6. Server Logs
6.1. The Operator's servers automatically record technical information about each request to the Service: network identifiers of the device, browser information, date and time of the request, as well as the result of processing the request.
6.2. For unregistered Users, technical identifiers of the device and browser are used to enforce processing limits without registration.
6.3. The specified data is used exclusively for the purposes of ensuring security, diagnosing technical problems, and protecting against abuse.
7. Modification and Deletion of Data
7.1. A registered User can change their name in their personal account.
7.2. The User can delete uploaded images through the "My Files" section on the website or via the API.
7.3. To delete an account and all associated personal data, as well as to exercise any data subject rights (access, rectification, erasure, restriction, objection, portability), the User has the right to contact: support@sigclean.io.
8. Protection of Personal Information
8.1. The Operator takes the necessary technical and organizational measures to protect the User's personal information from unauthorized access, destruction, modification, and other unlawful actions.
8.2. All data between the User's device and the Operator's servers is transmitted over an encrypted HTTPS/TLS channel.
8.3. Authentication is carried out exclusively via one-time codes sent to email. Passwords are not used and are not stored.
8.4. Access tokens (API keys) are stored only in hashed form; the original value of the key is inaccessible to the Operator.
9. Changes to the Privacy Policy
9.1. The Operator has the right to make changes to this Policy. When changes are made, the date of the last update is indicated. The new version enters into force from the moment it is posted on the Service.
9.2. The law of the Republic of Serbia applies to this Policy and the relationship between the User and the Operator.
10. Feedback
The User has the right to send all questions regarding this Policy and the processing of personal data to: support@sigclean.io
11. Operator's Details
Personal Data Operator: Artem Berezhnoi PR Subotica (PIB 115498026)
Contact for communication: support@sigclean.io
Version dated 18.07.2026.