This Privacy Policy is published by CIPHERPLUS PTE. LTD. (UEN 202316039M, Singapore), the developer and publisher of CipherSign, a quantum-safe document signing desktop application distributed via the Microsoft Store and direct download.
We also operate the CipherSign account service at https://www.cipherplus.io/account, where subscribers create an account, claim their seat and download their licence file. This policy covers both the application and that service. For the account service, CIPHERPLUS PTE. LTD. is the data controller.
Contact: [email protected] · Website: cipherplus.io/ciphersign
This section satisfies the disclosure requirements of GDPR Article 13, Singapore PDPA Section 13, and Microsoft Store ADA Section 5(h).
| Activity | Data handled | Where it goes |
|---|---|---|
| Reading documents you sign or verify | The document bytes you explicitly select via the file picker | Stays on your device. Read into memory only. |
| Creating a signing identity | Name, organisation, ML-DSA key pair you enter / generate | Local storage only: %LOCALAPPDATA%\CipherSign\keys\ and a backup copy in ~\Documents\CipherSign\keys\ |
| Signing a document | A .proof file containing the original document, signer name, organisation, public-key fingerprint, signed timestamp |
Written to your chosen output folder. CipherSign does NOT upload it. You may then send it to recipients (which is your choice and outside our control). |
| Verifying a document | The .proof file you select |
Stays on your device. Verification uses only the public keys you have imported as Contacts. |
| Importing a Contact Card | The signer's name, organisation, public key, fingerprint (from a .card file) |
Local storage only. |
| Paying for a subscription | Handled entirely by Stripe. We receive your email address, the plan you bought, the amount, and the dates it covers | We never see your card number. Stripe holds the card details under its own privacy policy; we store only the record of what was paid and until when. |
| Creating an account at https://www.cipherplus.io/account | Your email address, a name you choose, and your password — stored only as a one-way hash, never as the password itself — plus a one-time code we email you to confirm the address is yours | Stored in our database in Singapore. The confirmation code is destroyed the moment it is used. |
| Signing in | Your email address, the IP address of the request, and whether it succeeded | Failed attempts are counted per address and per IP address, to slow down password guessing. The record is deleted 24 hours after the last failed attempt. A session cookie keeps you signed in; it carries no personal data, cannot be read by other websites, and is strictly necessary for the service to work. |
| Claiming your seat and downloading a licence | The email address your seat was given to (by you, or by whoever invited you) and a one-way hash of a hardware identifier — your Machine ID. The underlying identifier never leaves your machine | Stored against your seat so the licence file works only on that machine. See section 4. |
| Business plans: being given a seat | If your employer buys a Business plan, the person administering it gives us your email address so we can offer you a seat | We email you an invitation that only you can use. It is held against that seat until you claim it or it expires after 7 days. You choose whether to claim it. |
| Business plans: seat history | Who was invited to each seat, who took it, who was removed, who manages the subscription, and when | Shown to the buyer and the manager so they can see how their seats are used, and kept to help us prevent misuse. |
| Automatic licence renewal (optional, off by default) | Your Machine ID and a secure code we give your copy of CipherSign | The code lets CipherSign collect its new licences, and works only for your computer. Your computer always contacts us; our servers never contact your computer. We email you whenever a computer is connected to your account. |
| Using the app day-to-day | None | No telemetry. No analytics. No crash reports. CipherSign performs no network communication during normal operation. |
For total clarity, CipherSign and CIPHERPLUS PTE. LTD. do not collect, store, or transmit any of the following:
Paid signing licenses are bound to a specific machine. To do this, CipherSign computes a one-way cryptographic hash of a stable hardware identifier on your device. The hash is irreversible — given the hash, no party (including us) can recover the original identifier or use it to identify your device on a network.
CipherSign shows you this Machine ID under Settings → License. You paste it into your account page, and we return a licence file binding that hash to your subscription's expiry date. If you turn on optional online renewal, CipherSign sends the same hash for you when the licence is due. We never request, receive, or store the underlying hardware identifier itself — only its irreversible hash.
The Machine ID is kept for as long as your seat holds that licence. Releasing or reassigning the seat deletes it, together with any device token issued for online renewal.
All data CipherSign handles stays on your device, protected by Windows' built-in user-profile permissions. We recommend backing up your signing keys (the application provides guidance for this).
On our side, the account service runs on Google Cloud in Singapore, chosen so that your records stay in Singapore. The database is reachable only by our own servers over a private connection — it is not exposed to the internet — and the keys and passwords it needs are held in a dedicated secrets service, never in our code. Your password is stored only as a one-way hash, so nobody, including us, can read it back.
We keep as little as possible, for no longer than we need it:
| What | How long we keep it |
|---|---|
| Your account (email, name, password hash) | Until you ask us to delete it. |
| Email-confirmation and password-reset codes | Destroyed the moment they are used. |
| Failed sign-in records (email address, IP address) | Deleted 24 hours after the last failed attempt. |
| Outgoing email we have queued to send you | The message body is erased as soon as it is sent (or abandoned). |
| Machine ID hash | Until the seat is released, reassigned or removed. |
| Purchase records (what was paid, and until when) | As long as Singapore law requires us to keep accounting records — currently five years. |
| Business seat history | As long as the subscription exists, plus five years. |
| Automatic renewal code | Deleted when you turn automatic renewal off, when your seat is removed, or when you reset your password. |
The CipherSign application uses no third-party services in its operation: no analytics SDK, no advertising network, no cloud storage, no remote logging, no third-party telemetry.
The account website necessarily does. These are the only four, and each sees only what its job requires:
| Who | What they do, and what they see |
|---|---|
| Stripe | Takes the payment. Stripe sees your card details; we never do. Stripe tells us your email address, the plan, and the dates paid for. |
| Google Cloud | Hosts the two servers and the database, in Singapore. Google is our processor and does not use your data for its own purposes. |
| Cloudflare | Carries traffic to www.cipherplus.io and filters abuse, so it sees the IP address and the request. |
| Google Workspace (Gmail) | Delivers our email to you, sent from [email protected]. |
The application is distributed via the Microsoft Store and direct download. When distributed via Microsoft Store, Microsoft may provide us, the publisher, with aggregate acquisition statistics (downloads, country breakdown, ratings) through its standard developer dashboards. This data is aggregated and does not identify individual users to us. Microsoft's own privacy practices for Store users are governed by the Microsoft Privacy Statement.
The application collects no personal data, so there is nothing application-side for us to hold. Your local data (keys, contacts, signed documents) stays in your control on your own device.
For your account (email address, name, password hash, Machine ID hash, seats, purchase records):
EU and UK users have these rights under GDPR / UK-GDPR. California users have equivalent rights under the CCPA / CPRA. Singapore users have equivalent rights under the PDPA. We respond to all such requests within 30 days.
CipherSign is a business productivity tool and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has supplied us with personal information, contact us and we will delete it.
Because CipherSign processes data only locally on your device, no cross-border transfer occurs through the application itself. Your account records are stored in Singapore. Some of the services named in section 6 are international: Stripe processes payments outside Singapore, and Cloudflare carries requests through whichever of its locations is nearest to you. Where personal data is transferred, we rely on those providers' standard contractual clauses and their obligations as processors. If you contact us by email from another country, that email is transmitted via your email provider and ours under their respective privacy practices.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top and (where the change is significant) by a notice on the CipherSign product page. The current version is always available at cipherplus.io/ciphersign/privacy.html.
This policy is governed by the laws of the Republic of Singapore, in accordance with the Personal Data Protection Act 2012. The application is also designed to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the California Consumer Privacy Act ("CCPA"), to the extent those laws apply to non-EU / non-California developers serving users in those jurisdictions via international app distribution.
CIPHERPLUS PTE. LTD.
Green House, SMU Connexion, 40 Stamford Road, Singapore 178908
Email: [email protected]
Product page: cipherplus.io/ciphersign
For privacy-related queries please write to the email above with subject line "Privacy request — CipherSign" so we can route the request appropriately.
