SigStudio
Sign In Start $1 Trial

Privacy Policy — LoadOut Pty Ltd

(ABN 42 150 978 359)
Effective: January 2026

LoadOut Pty Ltd (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and disclose personal information when you interact with:

  • Email Signature Rescue (ESR)
  • SigStudio
  • All related applications and installers, including:
    • Browser extensions (Chrome, Firefox, Safari, Opera, Edge, Brave)
    • Windows Installer App
    • MacOS Installer App
    • Outlook Add-In
    • API-based or custom software built for clients
    • Any free tools that allow users to install or paste HTML email signatures without a paid subscription
  • Our websites, communications, and support services

This Privacy Policy complies with the Privacy Act 1988 (Cth).
Individuals in the EU/EEA or UK may also have rights under the GDPR and UK GDPR. Appendix 1 outlines these additional rights and how we handle EU/UK personal data.

1. The Information We Collect

Personal Information

Personal information means information about an individual who is identified or reasonably identifiable.

We may collect the following types of personal information:

Identity Data

  • First, middle and last name
  • Title, job title
  • Gender (if provided)

Contact Data

  • Email address
  • Phone number

Financial Data

(Processed only by Stripe or PayPal — we do not store payment card details.)

  • Billing country
  • Payment status
  • Transaction history

Transaction Data

  • Purchases of ESR or SigStudio plans
  • Subscription details
  • Renewal dates
  • Refunds
  • Upgrades or downgrades

Technical & Usage Data

Collected from ESR, SigStudio, browser extensions, website interactions, and installers:

  • IP address
  • Device data & operating system
  • Browser type and version
  • Login events
  • Page views and session statistics
  • Extension usage patterns (e.g., installation success, connection key used)
  • Email client detection (Outlook, Gmail, Apple Mail, etc.)
  • Diagnostic logs to help troubleshoot installation issues
  • Error messages and system logs

Signature & Template Data

This applies to both ESR & SigStudio:

  • HTML code you create or upload
  • Template customisation data
  • User profile fields (e.g., name, title, phone numbers)
  • Icon selections, colours, branding
  • Installation keys generated by ESR/SigStudio
  • Metadata required to generate, install and update your organisation’s signatures

Profile Data

  • ESR or SigStudio account password
  • Support requests and correspondence
  • Feedback, surveys, preferences
  • Content posted or shared through the Platform
  • Role-based permissions (admin, user, group manager, etc.)

Interaction Data

  • Forms filled out
  • Survey responses
  • Feature usage patterns

Marketing & Communications Data

  • Marketing preferences
  • Email engagement data

Professional Data (Workers, Contractors, Applicants)

  • CV/resume
  • Employment history
  • Professional references

2. Sensitive Information

We generally avoid collecting sensitive information.
We may collect limited sensitive information only if voluntarily provided, such as:

  • Professional association memberships included in signature fields
  • Information included in resumes for job applicants

We only collect, hold, use or disclose sensitive information if:

  • You consent
  • It is necessary for providing ESR/SigStudio features (e.g., signature content)
  • It is related to the primary purpose of collection
  • Required by law

3. How We Collect Personal Information

Directly from you

When you:

  • Create an ESR or SigStudio account
  • Install a browser extension or add-in
  • Use a free HTML paste installer
  • Contact support
  • Request help via email, onboarding or consultation
  • Join a Legacy Trial
  • Complete a trial or onboarding form

Indirectly

When you interact with our website, apps or extensions through:

  • Cookies
  • IP logging
  • Browser or device diagnostics
  • Automated error reports
  • HTML installation events

From third parties

  • Stripe or PayPal (billing and payment confirmations)
  • Analytics providers (Google Analytics, PostHog, etc.)
  • Email or browser vendors (e.g., detection of email client type)
  • Employers who invite you under their organisational account (ESR or SigStudio)
  • Social networks if you interact with our content

Public Sources

  • LinkedIn
  • Public company websites

4. Why We Collect and Use Personal Information

Below is a summary of how we use your personal information.

Purpose Types of Data Used
To create an account and provide login access Identity, Contact
To deliver ESR & SigStudio services Identity, Contact, Profile, Signature Data, Technical, Professional
To provide installers and extensions for email clients Technical, Usage, Signature Data
To manage billing, invoicing, refunds & payments Identity, Financial, Transaction
To support installation and troubleshooting Technical, Usage, Profile
To respond to support enquiries Identity, Contact, Profile
To operate, maintain and improve the Platform Technical, Usage, Profile
To run analytics and feature performance testing Technical, Usage, Profile
To deliver marketing and communications Identity, Contact, Marketing
To run promotions or competitions Identity, Contact, Interaction
To assess employment applications Identity, Contact, Professional
To comply with legal obligations Any required data

Free Users Using Paste-HTML Installers

We collect minimal data to operate these tools, such as:

  • Browser type
  • Installation status
  • HTML content for processing only (not stored permanently)

We do not use free users' HTML content for training AI models, data mining, or external sharing.

5. Disclosure of Personal Information

We may disclose personal information to:

  • Employees and contractors
  • ESR/SigStudio infrastructure providers (e.g., AWS)
  • Browser store platforms (for extension distribution)
  • CRM and communication tools (e.g., Mailchimp, Postmark)
  • Payment processors (Stripe, PayPal)
  • Professional advisers (lawyers, accountants)
  • Our insurers
  • Potential business partners or acquirers
  • Courts and regulatory authorities where required
  • Subcontractors providing diagnostic or support services
  • Third-party APIs used by ESR or SigStudio (e.g., GA, tracking)

We never sell your personal information.

6. Overseas Disclosure

Some third-party providers store data outside Australia, including:

  • USA
  • EU
  • UK
  • Singapore
  • Other global AWS locations

We take reasonable steps to ensure data stored overseas is protected.

7. Your Rights and Controlling Your Information

Your Choice

You may choose not to provide personal information; however, this may limit your ability to use ESR or SigStudio.

Access

You may request access to personal information we hold about you.

Correction

You may request correction of inaccurate information.

Unsubscribe

You may opt out of marketing communications at any time.

Complaints

You may lodge privacy complaints directly with us or the OAIC.

8. Storage and Security

We implement industry-standard security measures including:

  • Encryption
  • Access controls
  • Audit logging
  • Firewalls and secure hosting

No data transmission online is completely secure, and users accept transmission risk.

9. Cookies and Similar Technologies

We use cookies and similar technologies on our websites (including sigstudio.app and emailsignaturerescue.com) and within the browser-based SigStudio and ESR platforms. Cookies are small text files placed in your browser to store your preferences and to recognise you when you return. Cookies, by themselves, do not tell us your email address or other personally identifiable information. However, if and when you provide personal information to us (for example, by creating an account or logging in), that information may be linked to the data stored in a cookie.

Our browser extensions, desktop installer applications and Outlook add-in do not set cookies in the traditional sense. Instead they store a small amount of data locally on your device (such as your installation key, connection status and diagnostic information) so that they can retrieve and install your signatures. This data is handled in accordance with this Privacy Policy.

Managing cookies

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including strictly necessary cookies) you may not be able to log in to, or use, all or parts of the Platform. Where required by law (for example, for visitors located in the EU, EEA or UK) we will only set non-essential cookies with your consent, and you may withdraw that consent at any time through the cookie settings on our website.

Types of cookies we use

  • Strictly necessary cookies. These are required for the operation of the Platform. They include, for example, cookies that keep you logged in to secure areas of the Platform, protect forms against cross-site request forgery, and enable online payment through our payment providers.
  • Analytical/performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around the Platform when they are using it. This helps us improve the way the Platform works, for example by ensuring that users find what they are looking for easily and by identifying installation steps where users encounter problems.
  • Functionality cookies. These are used to recognise you when you return to the Platform and to remember your preferences (for example, your chosen currency, language or dismissed notices).
  • Targeting and advertising cookies. These record your visit to our website, the pages you have visited and the links you have followed. We may use this information to make our website and any advertising displayed on it more relevant to your interests, and may share this information with our advertising partners for this purpose.
  • Social media cookies. These are used when you share information using a social media sharing button on our websites, or you link your account or engage with our content on or through a social media site. The social network will record that you have done this. This information may be linked to targeting/advertising activities.

We may, at any time and at our discretion, vary this Cookie section by publishing the amended version on our website. We recommend you check our website regularly to ensure you are aware of our current cookie practices.

10. Links to External Websites

We are not responsible for external sites linked from our website or apps.

11. Changes to This Privacy Policy

We may update this Policy at any time by publishing the revised version on our website(s).

12. Contact Us

LoadOut Pty Ltd
ABN 42 150 978 359
Email: support@sigstudio.app

Appendix 1 — GDPR & UK GDPR Privacy Rights

This Appendix applies to individuals located in:

  • The European Union (EU)
  • The European Economic Area (EEA)
  • The United Kingdom (UK)

For these individuals, LoadOut Pty Ltd processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR, and the Data Protection Act 2018 (DPA 2018).

1. Legal Basis for Processing (GDPR Art. 6)

We will only collect and process your personal data where we have a lawful basis to do so. These include:

(a) Consent

Where you have provided clear consent (e.g., marketing emails, optional features).

(b) Contractual Necessity

Where processing is required to provide ESR/SigStudio services, installers, extensions, or to fulfil our contractual obligations to you.

(c) Legal Obligations

Where we must process your data to comply with applicable laws.

(d) Legitimate Interests

Where processing is necessary for our business operations, such as:

  • Improving ESR/SigStudio
  • Preventing fraud
  • Ensuring system security
  • Supporting and diagnosing installation issues
  • Analytics that do not materially impact your rights

We will always balance legitimate interests against your privacy rights.

2. Your Rights Under GDPR / UK GDPR

Individuals located in the EU/EEA/UK have the following rights:

(a) Right to Access

You can request a copy of the personal data we hold about you.

(b) Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

(c) Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data in certain circumstances, including where:

  • It is no longer needed
  • You withdraw consent
  • You successfully object to processing
  • Processing was unlawful

We may retain data where legally required.

(d) Right to Restrict Processing

You may request that we limit how we use your data under specific conditions.

(e) Right to Data Portability

You may request a copy of your data in a structured, machine-readable format so you can transfer it to another provider.

(f) Right to Object

You may object to processing where we rely on legitimate interests, including profiling.
You may also object to direct marketing at any time.

(g) Right to Withdraw Consent

Where we rely on consent (e.g., marketing), you may withdraw it at any time.

(h) Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or significant effects.

3. International Data Transfers

LoadOut Pty Ltd is located in Australia.
When personal data is transferred outside the EU/EEA/UK, we use one or more of the following protection mechanisms:

  • Standard Contractual Clauses (SCCs)
  • Equivalent UK International Data Transfer Agreements (IDTAs)
  • Adequacy decisions (where applicable)
  • Contractual safeguards with third-party processors

We ensure all third-party providers implement appropriate technical and organisational safeguards.

4. Data Controllers & Data Processors

Data Controller

LoadOut Pty Ltd acts as the Data Controller for:

  • ESR & SigStudio account information
  • Website and analytics data
  • Billing information
  • Installer usage data
  • Marketing preferences

Data Processor

When your organisation uses ESR/SigStudio to manage signatures for staff, we may act as a Data Processor on behalf of the organisation.

In these cases, your employer acts as the Data Controller, and:

  • We only process data under their instructions
  • They determine lawful basis, retention schedules, and purposes
  • We provide appropriate technical and security safeguards

5. How to Exercise Your Rights

To exercise any GDPR/UK GDPR rights, you may contact us at:

Email: support@sigstudio.app
Subject line: GDPR/UK GDPR Rights Request

We will respond within 30 days (or notify you if additional time is required due to complexity).
You may be required to verify your identity before we process your request.

6. Complaints to Supervisory Authorities

If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.

EU and EEA residents

Find your authority here:

You can find the contact details of your national data protection authority on the European Data Protection Board website: https://www.edpb.europa.eu/about-edpb/our-members_en

UK residents

Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint/

We encourage you to contact us first so we can attempt to resolve your concerns.