Privacy Policy

Last updated: April 1, 2026

X-sign.app is operated by ITS A WRAP AB (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our app and related services.

By using our app and services, you agree to this Privacy Policy.

────────────────────────────

INFORMATION WE COLLECT

We may collect the following information:

• Name and username
• Email address
• Other information you provide when registering, placing an order, or contacting us

We may also receive information from third parties, such as payment providers, social media services, fraud prevention providers, and service providers including Firebase by Google.

────────────────────────────

HOW WE USE YOUR INFORMATION

We use your information to:

• Provide, operate, and personalize our services
• Process orders and payments
• Improve our app, features, and customer support
• Monitor app performance, stability, and security
• Send service-related and important administrative emails
• Comply with legal obligations and enforce our terms

Where required by law, we process personal data on appropriate legal bases, including performance of a contract, legal obligations, legitimate interests, or your consent.

────────────────────────────

FIREBASE

We use Firebase, a service provided by Google, to support parts of our app and infrastructure. Depending on the Firebase services enabled in the app, Firebase may process certain technical and usage-related information, such as device identifiers, app instance information, crash reports, diagnostics data, and analytics-related event data. Google states that Firebase may process and store data in locations where Google or its agents maintain facilities, unless a specific service offers data location controls.

Firebase may be used for features such as hosting, authentication, cloud storage, analytics, performance monitoring, crash reporting, push notifications, or database functionality, to the extent these services are enabled in our app. For more information about how Google processes Firebase data, see Google’s Firebase privacy documentation.

────────────────────────────

SHARING OF INFORMATION

We may share your information with trusted third-party service providers that help us operate our business, including hosting providers, payment processors, analytics providers, customer support providers, fraud prevention services, and infrastructure providers such as Firebase. We may also share information when required by law, legal process, or to protect our rights and safety.

We do not sell your personal data.

────────────────────────────

COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies and similar technologies where relevant to improve functionality, analyze usage, and enhance your experience. You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

────────────────────────────

DATA RETENTION AND SECURITY

We use reasonable administrative, technical, and organizational measures to protect your information. We retain personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements.

────────────────────────────

YOUR RIGHTS

You may request access to, correction of, or deletion of your personal data, or object to certain processing, by contacting us. You may also unsubscribe from non-essential emails at any time or stop using the service by cancelling your account.

If you are located in the European Economic Area, United Kingdom, or another region with similar laws, you may have additional rights under applicable data protection laws, including the GDPR. If applicable under California law, you may also have certain privacy rights, including the right to request access to or deletion of your personal information. CCPA-style obligations depend on whether a business meets specific applicability thresholds.

────────────────────────────

INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries outside your country of residence, including outside Sweden. Google states that Firebase data may be processed where Google or its agents maintain facilities, unless data location options are available for the specific service used.

────────────────────────────

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be posted with an updated revision date. Your continued use of the app or services after changes become effective means you accept the revised Privacy Policy.

────────────────────────────

CONTACT US

If you have questions about this Privacy Policy or want to exercise your rights, please contact:

ITS A WRAP AB