Privacy policy

This policy describes how Aksu Tech, Inc., a Delaware corporation ("Aksu Tech", "we", "us"), collects, uses, discloses, and protects information when you use Sforza, the contract management service available at sforza.ai (the "Service"), including its public pages and its electronic signing ceremonies.

Account information: your name, email address, and your role within your company's workspace.

Workspace content: the contracts and documents your company uploads or executes through the Service, together with the details recorded about them, such as titles, parties, dates, and tags.

Signing records: when a document is sent for signature, we record each signer's name, email address, any stated role and represented company, the signature they type or draw, their consent, their network address and browser details, and the time of each step of the signing session. These records exist to make the executed document verifiable.

Billing information: payments are handled by our payment processor. We receive confirmation of payment, the billing name, and the last digits of the payment method; full card numbers never reach our systems.

Messages and logs: messages you send through the contact form or to support@sforza.ai, and technical logs of access to the Service kept for security and reliability.

We use the information above to provide and secure the Service: to store and organize your company's documents, to run signing ceremonies and preserve their evidence, to send renewal alerts and service notifications, to process subscription payments, to answer support requests, and to protect the Service against misuse. We do not sell personal information, we do not share it for advertising, and we do not use customer documents to train artificial intelligence models.

A small set of service providers processes information on our behalf, acting only on our instructions and under agreements that limit their use of it. Each category serves a single purpose: application hosting; database and encrypted document storage in the European Union; outbound email delivery; software-assisted document reading, indexing, and answers; payment processing; and support mailboxes. Information reaches these providers over encrypted connections and strictly to operate the Service. It is never sold, and never shared with third parties for their own purposes.

Information is also visible to the people it is meant for: members of your company's workspace see the workspace's documents according to its access rules, and a person invited to sign a document receives that document and, on completion, the executed record. We may disclose information where the law requires it, and in that case only what is required.

Customer content is encrypted in transit and at rest and stored in the European Union. Access to the Service is by invitation only, and every workspace is isolated from every other at the database layer. Documents are served through access-controlled links that expire within minutes. Signing links are personal, single-purpose, and stored only in hashed form. Signing sessions and administrative actions are written to append-only records that cannot be edited afterwards, and executed documents are fingerprinted so any later change is detectable.

Workspace content is retained while the account is active and for ninety days after a subscription ends, as described in the Cancellation policy, after which it is permanently deleted. Executed documents and their signing records are retained as legal records for the account's benefit while the account exists. Billing records are kept for the legally required period. Support messages are kept as long as needed to resolve the matter.

You may request access to, correction of, export of, or deletion of your personal information by writing to support@sforza.ai from the email address concerned. We answer within thirty days. Where European data protection law applies, these requests are handled under it, and you may also complain to your local supervisory authority. Deletion requests are honored except for information we must keep as part of executed legal records or by law, and we will tell you when that exception applies.

Customer content is stored in the European Union. Some of our providers process limited operational data in the United States; those transfers take place under the providers' data processing agreements and recognized transfer safeguards.

The Service is a business tool and is not directed to children. We do not knowingly collect information from anyone under sixteen.

We may update this policy as the Service evolves. For material changes we give notice by email or in the product before the change takes effect, and this page always shows the date of the current version.

Aksu Tech, Inc., support@sforza.ai.