Parapho

Terms of Service

Version 2026-10-29 · Effective 2026-10-29

These Terms of Service ("Terms") form a binding agreement between [Legal entity name] ("Parapho", "we", "us") and the person or organization that creates an account or uses the Service ("Customer", "you"). If you accept these Terms on behalf of an organization, you confirm that you have authority to bind it. If you do not agree, do not use the Service.

1. Definitions

2. Accounts and security

  1. You must be at least 18 and able to form a binding contract. Give accurate registration information and keep it up to date.
  2. Two-factor authentication is mandatory for every account. You are responsible for keeping your password, authenticator device and recovery codes secure, and for all activity under your account and Workspace.
  3. Tell us promptly at [privacy@yourdomain] if you suspect unauthorized access. We may suspend access to protect the Service or any user.
  4. Workspace owners and admins control membership, roles, API keys and integrations, and are responsible for their Authorized Users' compliance with these Terms.

3. The Service

Subject to these Terms, we grant you a non-exclusive, non-transferable right during the term to access and use the Service for your internal business or personal purposes. The Service lets you prepare documents and templates, send Envelopes with signing order, collect electronic signatures, generate sealed PDFs with certificates of completion, verify documents, and integrate through our API. We may improve, change or discontinue features, but we will not materially reduce the core functionality of a paid plan during a paid term.

4. Electronic signatures

  1. Legal effect. The Service is designed to produce electronic signatures and records that can satisfy laws such as the US ESIGN Act, the Uniform Electronic Transactions Act (UETA), the UK Electronic Communications Act 2000 and the EU eIDAS Regulation (as a "simple" electronic signature). Each Signer must agree to the Electronic Record and Signature Disclosure before signing.
  2. Your responsibility. You alone decide whether an electronic signature is appropriate for a given transaction and jurisdiction, and whether you need further authentication, witnessing, notarization or a qualified electronic signature. Some documents cannot legally be signed electronically in some places (for example wills, codicils and testamentary trusts, some family-law and court documents, some real-estate deeds, and certain notices such as utility shut-offs, eviction, or product recalls). Parapho does not give legal advice.
  3. Signer identity. By default, a Signer is identified by control of the email address the link was sent to. Optional access codes add a second factor. We do not guarantee the identity of any Signer.
  4. Evidence. We generate an audit trail and certificate of completion for each completed Envelope, apply a PDF digital signature, and record its SHA-256 fingerprint so its integrity can be checked later. Envelopes created with test-mode API keys are watermarked and not legally binding. You are responsible for keeping copies you may need as evidence.

5. Customer Data

  1. Ownership. As between you and us, you own Customer Data. You grant us a worldwide, limited license to host, copy, transmit, display and process Customer Data only as needed to provide, secure and support the Service, and as required by law.
  2. Your responsibilities. You confirm that you have all rights, notices and lawful bases needed to submit Customer Data, including Recipients' personal data, and to instruct us to process it.
  3. No other use. We do not sell Customer Data, use it for advertising, or use it to train machine-learning models.
  4. Export and deletion. You can download sealed documents and delete Envelopes at any time. If you delete your account yourself, any Workspace where you are the only member is deleted immediately, after you confirm. If we end the Service for any other reason, Customer Data remains available for export for 30 days. Deleted data is removed from production systems straight away, and from backups within 35 days, unless the law requires us to keep it.

6. Data Processing Addendum

To the extent we process personal data in Customer Data on your behalf, we act as your processor (or service provider), and this section forms our Data Processing Addendum ("DPA"):

  1. Instructions. We process personal data only on your documented instructions, which are these Terms and your use of the Service, unless the law requires otherwise. In that case we will tell you first where the law allows.
  2. Confidentiality. Everyone authorized to process personal data is bound by confidentiality.
  3. Security. We maintain the technical and organizational measures described in our Security overview, appropriate to the risk (GDPR Art. 32).
  4. Sub-processors. You authorize the sub-processors listed in our Privacy Policy. We will give 30 days' notice of changes, during which you may object on reasonable data-protection grounds. If we cannot resolve the objection, you may terminate the affected Service. We remain liable for our sub-processors.
  5. Assistance. We will help you, taking into account the nature of the processing, to respond to data-subject requests, and with security, breach notification, data protection impact assessments and prior consultation.
  6. Breach notification. We will notify you without undue delay, and in any event within 48 hours, after becoming aware of a personal data breach affecting Customer Data. We will provide the information you reasonably need to meet your obligations.
  7. Deletion or return. At the end of the Service we will delete or return personal data as described in section 5.4.
  8. Audits. We will make available the information necessary to demonstrate compliance, and allow reasonable audits no more than once a year, on 30 days' notice, at your cost, and subject to confidentiality. Where available, these may be satisfied by independent third-party reports.
  9. Transfers. Restricted transfers are governed by the EU Standard Contractual Clauses (Module 2 or 3 as applicable) and the UK International Data Transfer Addendum, which are incorporated by reference.
  10. Details of processing. Subject matter and duration: providing the Service for the term. Nature and purpose: hosting, routing, signing, sealing and verifying documents. Data subjects: Authorized Users, Recipients and individuals named in documents. Categories: identity and contact data, signatures, document contents, and technical and audit data. Special categories: only if you choose to include them in documents, in which case you are responsible for having a lawful basis.

7. Acceptable use

You will not, and will not allow anyone else to:

8. Signers without an account

If you sign through a link, you agree to the parts of these Terms that apply to using the signing page, to section 7, and to the Electronic Record and Signature Disclosure. Your agreement with the sender about the document's content is between you and the sender. Parapho is not a party to it.

9. API and embedding

  1. Keep API keys and webhook secrets confidential. We store only hashes of API keys, so we cannot recover a lost key.
  2. We may apply rate limits and change the API, with reasonable notice of breaking changes to generally available endpoints.
  3. If you embed signing in your application, you must show Signers the e-signature disclosure we display, and must not change or hide our consent, audit or security features.

10. Plans and fees

  1. Plans. The Free plan and paid plans (currently Solo and Team) have the features and limits shown on our pricing page and in the app. "Unlimited" envelopes are subject to fair use of up to 1,000 envelopes per Workspace per month unless we agree otherwise in writing.
  2. Subscriptions. Paid plans are billed in advance, monthly or yearly, through our payment processor Stripe. They renew automatically until cancelled. You can cancel at any time in the billing portal; cancellation takes effect at the end of the current period, and you keep access until then.
  3. Usage-based fees. API and embedded envelopes are charged per completed envelope at the published rates. Each month's free allowance is applied first, and fees are billed monthly in arrears. Envelopes created with test-mode keys are never charged.
  4. Plan changes. Upgrades take effect immediately and are prorated. If you downgrade or cancel, Free plan limits apply from the end of the period. Your existing documents and envelopes are kept, but features and quotas above the Free plan stop working.
  5. Payment. Fees exclude taxes. Where we are required to collect sales tax, VAT, GST or similar taxes, they are calculated from your billing address and added to your invoice. If you give a valid business tax ID, reverse charge may apply, and you are then responsible for accounting for the tax. Fees are non-refundable except where the law requires. If a payment fails, we may suspend paid features after reasonable notice. We may change prices for future renewal terms with at least 30 days' notice.

11. Confidentiality

Each party will protect the other's non-public information, with at least reasonable care, and use it only to perform under these Terms. This does not apply to information that is public through no fault of the recipient, already known to it, independently developed, or rightfully received from a third party. Disclosure required by law is permitted after notice where lawful.

12. Intellectual property

We and our licensors own the Service and all related intellectual property. Except for the rights expressly granted here, no rights are transferred. If you send feedback, we may use it without obligation. Open-source components are licensed under their own licenses.

13. Third-party services

If you connect third-party services, such as your webhook endpoint or an embedding application, their terms govern your use of them. We are not responsible for them.

14. Warranties and disclaimers

Each party warrants that it has the authority to enter into these Terms. We warrant that we will provide the Service with reasonable skill and care, and will not materially reduce its overall security. Except as expressly stated, the Service is provided "as is" and "as available", and to the extent permitted by law we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and that the Service will be uninterrupted or error-free, or that any signature will be enforceable in a particular jurisdiction.

15. Limitation of liability

To the extent permitted by law: (a) neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or data, even if advised of the possibility; and (b) each party's total liability arising out of or relating to these Terms will not exceed the greater of the amounts you paid us in the 12 months before the event giving rise to liability, or £100 (or the local equivalent). These limits do not apply to your payment obligations, a party's indemnification obligations, breach of section 7, or liability that cannot be limited by law, such as for death or personal injury caused by negligence, or for fraud.

16. Indemnification

You will defend and indemnify Parapho against third-party claims arising from Customer Data, your use of the Service in breach of these Terms or the law, or a dispute between you and a Signer about a document. We will defend and indemnify you against third-party claims that the Service, as we provide it, infringes their intellectual property rights. The indemnified party must give prompt notice, reasonable cooperation and control of the defense, and may not settle without consent, which will not be unreasonably withheld.

17. Term, suspension and termination

These Terms apply while you use the Service. You may stop using it and delete your account at any time. Either party may terminate for material breach not cured within 30 days of notice. We may suspend access immediately if we reasonably believe it is needed to prevent harm, fraud, a security incident or a legal violation, and we will restore access once the issue is resolved. Sections 5.4, 6 (for as long as we hold Customer Data), and 11 through 20 survive termination.

18. Changes to these Terms

We may update these Terms. We will notify you at least 30 days before a material change takes effect, unless the change is required by law or concerns new features. If you keep using the Service after the effective date, you accept the updated Terms. If you object, you may terminate before that date and receive a pro-rata refund of prepaid fees.

19. Governing law and disputes

These Terms are governed by the laws of England and Wales, without regard to conflict-of-laws rules. The courts of England and Wales have exclusive jurisdiction, but either party may seek injunctive relief in any competent court. If you are a consumer, nothing in these Terms affects rights you have under the mandatory laws of your country of residence, and you may bring proceedings in your home courts.

20. General

These Terms, together with any order form and the policies referenced here, are the entire agreement and supersede prior agreements on their subject. If any provision is unenforceable, the rest remains in effect. A failure to enforce is not a waiver. You may not assign these Terms without our consent. We may assign them in a merger, acquisition or sale of assets. Neither party is liable for delays caused by events beyond its reasonable control. Notices to us go to [privacy@yourdomain], and notices to you go to your account email. The parties are independent contractors. There are no third-party beneficiaries.

21. Contact

[Legal entity name], [Registered address] · [privacy@yourdomain]