1. Controller
2. Different by design
REALNYX Sign minimises personal data processing. It requires no registration, account, contacts or profile. It includes no advertising or tools intended to track your behaviour.
The PDF and handwritten signature are processed in your browser. The application does not need to store them in a REALNYX database for you to sign and download the document.
3. Information that may be processed
- PDF and signature: processed locally and not sent to REALNYX during the normal flow.
- Technical session: a temporary identifier protects requests.
- Optional verification: only when selected, the server returns the IP address, UTC time and a random reference; it receives neither the PDF nor signature.
- Security: the server or hosting provider may create minimal technical logs to prevent abuse and diagnose failures.
- Enquiries: if you email legal@realnyx.com, we process the information you provide to answer.
If verification is enabled, the technical data is added to the document on your device. You decide whether to store or share that PDF.
4. Purposes and legal basis
We process information required to provide the requested function, secure the session, prevent technical abuse, resolve incidents and answer enquiries. The legal basis is performance of the requested service and the legitimate interest in protecting the application and users.
We do not use data for advertising, profiling, sales prospecting or selling information.
5. Retention
REALNYX Sign does not retain the PDF or signature stroke during the normal flow. The session ends when the browser closes. Temporary abuse controls expire after their technical window and are not used to identify users.
Security logs are retained only for the minimum period needed. Email enquiries are kept while handled and for applicable legal periods.
6. Disclosures and technical providers
We do not sell, rent or disclose data for commercial, advertising or profiling purposes. Hosting infrastructure and networks that deliver technical libraries may process connection data strictly required to serve and protect the application, but they do not receive the PDF or signature stroke during the normal flow.
Data is disclosed only under a valid legal obligation or to establish, exercise or defend legal claims.
7. Your rights
You may request access, correction, erasure, objection, restriction or portability where applicable by emailing legal@realnyx.com. We may request the minimum information needed to verify identity.
You may also complain to the Spanish Data Protection Agency at aepd.es.
8. Security and changes
We apply reasonable measures for minimisation, document isolation, session protection and request limiting. Keep your device updated, check recipients and store documents securely.
This policy may change when the application or law changes. The date above identifies the current version.