Privacy Policy

This Privacy Policy explains how SocialPoints Media LLC, doing business as ToroDocs ("ToroDocs," "we," "us," or "our"), located at 2524 N Broadway, Edmond, OK 73034, collects, uses, discloses, and protects personal information when you use the ToroDocs electronic-signature platform and related websites (the "Service"). By using the Service, you agree to this Policy.

1. Information We Collect

Information you provide.

• Account information: your name, email address, password (stored only as a secure hash), and team/organization details.
• Billing information: your plan and subscription details. Payments are processed by Stripe; we do not store full payment-card numbers on our systems.
• Documents and their contents: files you upload, the fields you place, and the data entered into them.
• Recipient/signer information: the names, email addresses, and any information that you or your signers enter to complete a document.
• Support communications: information you send us through support or contact forms.

Information collected automatically.

• Usage and device data: log data such as IP address, browser type, pages viewed, and timestamps.
• Signature audit data: to make signatures legally reliable, we record events associated with signing — including IP address, timestamps, and consent — which appear in the audit trail and Certificate of Completion.
• Cookies: we use strictly necessary cookies to keep you signed in and operate the Service. We do not sell your personal information.

2. How We Use Information

We use personal information to: provide and operate the Service (including converting, sending, tracking, and sealing documents); deliver email notifications such as signing invitations, reminders, and completed copies; process payments and manage subscriptions and document metering; provide customer support; maintain security, prevent fraud and abuse, and enforce our Terms; comply with legal obligations; and improve the Service.

3. How We Share Information

We share personal information only as needed to operate the Service:

• Service providers (subprocessors): Stripe (payment processing), Mailgun (email delivery), and DigitalOcean (cloud hosting and encrypted document storage). These providers process data on our behalf under their own terms and safeguards.
• Your recipients: when you send a document, the recipient receives the document and the information you include; when a document is completed, the sealed copy and Certificate of Completion (including signer names, email addresses, IP addresses, and timestamps) are made available to the parties to that document.
• Legal and safety: we may disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of ToroDocs, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information, and we do not use the contents of your documents for advertising.

4. Data Retention

We retain personal information and documents for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Completed, sealed documents may be retained to preserve the integrity of the signed record and audit trail. You may request deletion of your data as described below; some information may be retained where required by law or for legitimate business purposes.

5. Security

We protect information using industry-standard measures, including encryption in transit (TLS), private encrypted storage of documents, hashed passwords, tamper-evident SHA-256 sealing of completed documents, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or obtain a copy of your data, and to object to or restrict certain processing.

• California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
• EU/EEA and UK residents (GDPR/UK GDPR): where applicable, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority. Our legal bases for processing include performance of a contract, legitimate interests, consent, and legal obligation.

To exercise any of these rights, contact us at support@torodocs.com. You may update your account information at any time in your account settings, and you can unsubscribe from non-essential emails using the link in those messages (transactional emails necessary to complete a signing may still be sent).

7. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

8. International Users

The Service is operated in the United States. If you access it from outside the U.S., you understand that your information will be processed in the United States, where data-protection laws may differ from those in your country.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or in-app notice) and update the effective date above.

10. Contact Us

For questions or requests regarding this Policy or your personal information:
SocialPoints Media LLC d/b/a ToroDocs
2524 N Broadway, Edmond, OK 73034
support@torodocs.com