Skiwo AS is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data.
The data controller for your personal data is Skiwo AS, located at Strandgata 19, 0152 Oslo, Norway.
We process your personal data based on:
We do not sell your personal data. We do not share your data with third parties except in the following cases:
All activity on our services is logged for security and compliance purposes. This includes login events, content access, uploads, downloads, and administrative actions. Each log entry records the actor identity, timestamp, IP address, and event metadata. These logs may be provided to law enforcement upon lawful request.
We retain your data for as long as your account is active or as needed to provide services. Audit logs and account data may be retained for up to 12 months after account termination for legal and compliance purposes. Content you delete is removed from our systems, subject to backup retention schedules and legal hold requirements.
When someone signs a document with VAMOSign, we record the name they type, their e-mail address, their mobile number if the sender gave one, their IP address, the time of each step, and the document's SHA-256 checksum. With selfie signing we also keep the photograph taken on the signing page.
Everyone gets the signed PDF by e-mail. VAMOSign keeps it for download for 30 days. After 90 days the files are deleted, and names, e-mail addresses and IP addresses are anonymised, unless the sending workspace pays for Archive, which keeps them for as long as it is on. The checksums and the times are kept, so a sealed document can still be checked.
Anyone holding a signed document can check it at www.vamosign.com/verify with the record code on its certificate, and can confirm who signed by typing every signer's e-mail address; we answer only yes or no for the whole set. For a document signed by several people, we keep a one-way fingerprint of all their e-mail addresses together (a keyed hash) after the addresses are anonymised, only to answer that question. For a document signed by one person, we keep nothing for it, and the check stops when the address is anonymised. The legal basis is legitimate interest: being able to show that a signature happened is the purpose of signing.
For documents a workspace sends, the workspace decides why the data is processed and is the controller. Skiwo AS processes it on the workspace's behalf, under the data processing agreement that is part of the terms. Read the data processing agreement
A signer can object to the fingerprint being kept and ask for it to be deleted. Write to privacy@skiwo.com.
Under GDPR, you have the right to:
To exercise these rights, contact our Data Protection Officer at privacy@skiwo.com.
We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security audits.
We use essential cookies to provide our services. We use Simple Analytics for privacy-friendly usage statistics without tracking cookies.
We may update this policy from time to time. We will notify you of any material changes by email or through our services.
For privacy-related questions or to exercise your rights:
Data Protection Officer:
privacy@skiwo.com
Company:
Skiwo AS
Strandgata 19, 0152 Oslo, Norway