This Privacy Policy for Digital Signature Users (the "Policy") is intended to apply globally to all individuals whose personal data is processed in connection with electronic signature transactions performed using Doctavian and/or Maven Mule’s electronic signature services ("Services"), regardless of their country of residence or location at the time of signing.
This Policy is drafted primarily to comply with:
Where local mandatory laws grant additional rights or impose stricter obligations (e.g., certain U.S. state laws, California CPRA, or similar), those local requirements will apply in addition to this Policy. Nothing in this Policy is intended to limit non-waivable statutory rights.
Maven Mule Ltd ("Maven Mule", "we", "us", "our") acts as a Data Controller for personal data processed in connection with the provision of the Services.
Where Maven Mule processes personal data strictly on behalf of a customer (e.g., enterprise sender of documents), Maven Mule may act as a data processor, and the customer acts as the data controller.
Maven Mule Ltd
Registered address: Borovci 15, Zagreb, Croatia
Contact email (privacy): security@mavenmule.com
This Policy applies to all individuals whose personal data is processed by Maven Mule in connection with the use of its electronic signature Services, regardless of their relationship with Maven Mule.
This includes, without limitation, individuals participating in an electronic signature transaction, such as:
This Policy applies only to the processing of personal data in the context of electronic signature transactions. It does not apply to the processing of personal data by Maven Mule in other contexts, including:
Depending on the configuration of the signing workflow, we may process the following categories of personal data:
We do not intentionally process special categories of personal data unless such data is included in a document uploaded by a customer.
We process personal data for the following purposes:
Where GDPR applies, personal data is processed based on one or more of the following legal grounds:
Personal data may be disclosed to:
All recipients are bound by contractual confidentiality and data protection obligations.
Personal data may be processed or stored outside the country of the data subject.
Where personal data of EU/EEA data subjects is transferred outside the EU/EEA, we rely on appropriate safeguards, such as:
Signed documents, audit trails, and related metadata are retained:
Retention periods may vary depending on document type, jurisdiction, and customer configuration.
Retention schedules are defined internally and may be aligned with industry standards and evidentiary best practices.
We implement technical and organizational measures designed to protect personal data, including:
No electronic system is completely secure; therefore, residual risks cannot be entirely eliminated.
Subject to applicable law, data subjects may have the right to:
Certain rights may be limited where retention is required for legal or evidentiary purposes.
Requests may be submitted to: security@mavenmule.com
We may require reasonable verification of identity before responding.
We may update this Policy from time to time. The effective date will be indicated above. Continued use of the Services after an update constitutes acknowledgment of the revised Policy.
