This Privacy Policy explains how VG-Real Estate Services Inc., operating as VG·Sign (“VG·Sign”, “we”, “us”) collects, uses, discloses, and protects personal information. It is written against the federal Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Law 25, and other applicable Canadian privacy frameworks. It applies to our websites, applications, and APIs (the “Service”).
1. Our two roles
We handle personal information in two capacities:
- As a business (controller) for Account Data — the information we collect to run your account, billing, and our own operations.
- As a service provider (processor) for Envelope Content — the documents, signatures, and recipient information our Customers send through the Service. For that Content, our Customer is the controlling organization, and we act on their instructions. Recipients with questions about a specific document should contact the Sender.
2. Information we collect
- Account information — name, work email, workspace name, password, and profile details (logo, signature, brand colour).
- Billing information — plan, transaction history, and billing contact. Card details are handled by our payment processor; we do not store full card numbers.
- Envelope Content — documents, attachments, field values, and the signatures applied to them.
- Signer and audit information — recipient name and email, signing-event timestamps, IP address, and device/browser information used to build the tamper-evident audit trail and certificate of completion.
- Phone number — where a Sender requires SMS one-time-code verification, the recipient’s phone number is used to deliver the code.
- Usage and device data — log data, approximate location derived from IP, and product-analytics events about how the Service is used.
3. How we use information
- to provide, secure, and support the Service;
- to authenticate signers and produce court-ready audit trails and certificates;
- to process payments and manage subscriptions;
- to communicate with you about your account, security, and service changes;
- to detect, prevent, and respond to fraud, abuse, and security incidents; and
- to comply with legal obligations.
4. Consent and legal basis
We collect, use, and disclose personal information with consent, which may be express or implied depending on the sensitivity of the information and the context, as permitted under PIPEDA. Recipients consent to electronic records and signatures through our Consumer Disclosure before signing. You may withdraw consent subject to legal and contractual restrictions; doing so may mean we can no longer provide part or all of the Service.
5. How we share information — subprocessors
We do not sell or rent personal information. We share it only with service providers (subprocessors) that help us operate the Service, under contracts requiring them to protect it and use it only for that purpose. The list below is representative and current as of the effective date; an up-to-date list is available on request at info@vg-realestate.ca.
- Supabase — database, authentication, and file storage. Envelope Content is stored in the
ca-central-1(Montreal) region. - Vercel — application hosting and content delivery.
- Stripe — payment processing and subscription billing.
- Resend — delivery of transactional and signing-related email.
- Twilio — delivery of SMS one-time verification codes.
- PostHog — product analytics.
- Sentry — error monitoring and reliability.
We may also disclose personal information where required by law, to enforce our agreements, to protect rights and safety, or in connection with a corporate transaction (merger, acquisition, or asset sale) subject to appropriate safeguards.
6. Where your information is stored
Envelope Content (documents, signatures, and audit logs) is stored in Canada, in the ca-central-1 (Montreal) region. Some operational and supporting services (for example, hosting, analytics, and error monitoring) may process limited data outside Canada; where that occurs, the information remains subject to safeguards consistent with this Policy and applicable law. See Data residency for details.
7. Retention
We retain personal information only as long as needed for the purposes described here or as required by law. Signed agreements are retained for a default period of seven (7) years, reflecting common limitation periods for commercial agreements. Before the retention window closes, we notify the Customer and offer the choice to extend retention, export a complete archive (signed PDFs plus audit logs), or securely delete. Account Data is retained for the life of the account and for a reasonable period afterward.
8. Security
We protect personal information with administrative, technical, and physical safeguards appropriate to its sensitivity, including encryption in transit and at rest, access controls, audit logging, and optional multi-factor authentication. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify affected parties and authorities as required by law.
9. Your rights
Subject to legal limits, you may request to access, correct, or delete your personal information, withdraw consent, or ask questions about how we handle it. Where Quebec’s Law 25 or other provincial law applies, you may have additional rights, including data portability. To exercise a right, contact info@vg-realestate.ca. If your information was submitted as part of an Envelope sent by one of our Customers, we may direct your request to that Customer, who controls that Content.
10. Cookies and analytics
We use strictly necessary cookies to operate the Service (for example, to keep you signed in and remember your theme), and limited analytics to understand and improve product usage. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling necessary cookies may break parts of the Service.
11. Children
The Service is intended for businesses and adults. We do not knowingly collect personal information from children under the age of majority. If you believe a child has provided us personal information, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. For material changes we will provide reasonable notice. The “last updated” date above reflects the current version.
13. Contact and complaints
Our Privacy Officer can be reached at info@vg-realestate.caor by mail at Attn: Privacy Officer, VG-Real Estate Services Inc., 840 Queens Plate Drive, Toronto, Ontario, Canada. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, or — for Quebec residents — the Commission d’accès à l’information du Québec.