SigStudio
Sign In Start $1 Trial

Privacy Policy — LoadOut Pty Ltd

(ABN 42 150 978 359)
Effective: January 2026

LoadOut Pty Ltd (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and disclose personal information when you interact with:

  • Email Signature Rescue (ESR)
  • SigStudio
  • All related applications and installers, including:
    • Browser extensions (Chrome, Firefox, Safari, Opera, Edge, Brave)
    • Windows Installer App
    • MacOS Installer App
    • Outlook Add-In
    • API-based or custom software built for clients
    • Any free tools that allow users to install or paste HTML email signatures without a paid subscription
  • Our websites, communications, and support services

This Privacy Policy complies with the Privacy Act 1988 (Cth).
Individuals in the EU/EEA or UK may also have rights under the GDPR and UK GDPR. Appendix 1 outlines these additional rights and how we handle EU/UK personal data.

1. The Information We Collect

Personal Information

Personal information means information about an individual who is identified or reasonably identifiable.

We may collect the following types of personal information:

Identity Data

  • First, middle and last name
  • Title, job title
  • Gender (if provided)

Contact Data

  • Email address
  • Phone number

Financial Data

(Processed only by Stripe or PayPal — we do not store payment card details.)

  • Billing country
  • Payment status
  • Transaction history

Transaction Data

  • Purchases of ESR or SigStudio plans
  • Subscription details
  • Renewal dates
  • Refunds
  • Upgrades or downgrades

Technical & Usage Data

Collected from ESR, SigStudio, browser extensions, website interactions, and installers:

  • IP address
  • Device data & operating system
  • Browser type and version
  • Login events
  • Page views and session statistics
  • Extension usage patterns (e.g., installation success, connection key used)
  • Email client detection (Outlook, Gmail, Apple Mail, etc.)
  • Diagnostic logs to help troubleshoot installation issues
  • Error messages and system logs

Signature & Template Data

This applies to both ESR & SigStudio:

  • HTML code you create or upload
  • Template customisation data
  • User profile fields (e.g., name, title, phone numbers)
  • Icon selections, colours, branding
  • Installation keys generated by ESR/SigStudio
  • Metadata required to generate, install and update your organisation’s signatures

Profile Data

  • ESR or SigStudio account password
  • Support requests and correspondence
  • Feedback, surveys, preferences
  • Content posted or shared through the Platform
  • Role-based permissions (admin, user, group manager, etc.)

Interaction Data

  • Forms filled out
  • Survey responses
  • Feature usage patterns

Marketing & Communications Data

  • Marketing preferences
  • Email engagement data

Professional Data (Workers, Contractors, Applicants)

  • CV/resume
  • Employment history
  • Professional references

2. Sensitive Information

We generally avoid collecting sensitive information.
We may collect limited sensitive information only if voluntarily provided, such as:

  • Professional association memberships included in signature fields
  • Information included in resumes for job applicants

We only collect, hold, use or disclose sensitive information if:

  • You consent
  • It is necessary for providing ESR/SigStudio features (e.g., signature content)
  • It is related to the primary purpose of collection
  • Required by law

3. How We Collect Personal Information

Directly from you

When you:

  • Create an ESR or SigStudio account
  • Install a browser extension or add-in
  • Use a free HTML paste installer
  • Contact support
  • Request help via email, onboarding or consultation
  • Join a Legacy Trial
  • Complete a trial or onboarding form

Indirectly

When you interact with our website, apps or extensions through:

  • Cookies
  • IP logging
  • Browser or device diagnostics
  • Automated error reports
  • HTML installation events

From third parties

  • Stripe or PayPal (billing and payment confirmations)
  • Analytics providers (Google Analytics, PostHog, etc.)
  • Email or browser vendors (e.g., detection of email client type)
  • Employers who invite you under their organisational account (ESR or SigStudio)
  • Social networks if you interact with our content

Public Sources

  • LinkedIn
  • Public company websites

4. Why We Collect and Use Personal Information

Below is a summary of how we use your personal information.

Purpose Types of Data Used
To create an account and provide login access Identity, Contact
To deliver ESR & SigStudio services Identity, Contact, Profile, Signature Data, Technical, Professional
To provide installers and extensions for email clients Technical, Usage, Signature Data
To manage billing, invoicing, refunds & payments Identity, Financial, Transaction
To support installation and troubleshooting Technical, Usage, Profile
To respond to support enquiries Identity, Contact, Profile
To operate, maintain and improve the Platform Technical, Usage, Profile
To run analytics and feature performance testing Technical, Usage, Profile
To deliver marketing and communications Identity, Contact, Marketing
To run promotions or competitions Identity, Contact, Interaction
To assess employment applications Identity, Contact, Professional
To comply with legal obligations Any required data

Free Users Using Paste-HTML Installers

We collect minimal data to operate these tools, such as:

  • Browser type
  • Installation status
  • HTML content for processing only (not stored permanently)

We do not use free users' HTML content for training AI models, data mining, or external sharing.

5. Disclosure of Personal Information

We may disclose personal information to:

  • Employees and contractors
  • ESR/SigStudio infrastructure providers (e.g., AWS)
  • Browser store platforms (for extension distribution)
  • CRM and communication tools (e.g., Mailchimp, Postmark)
  • Payment processors (Stripe, PayPal)
  • Professional advisers (lawyers, accountants)
  • Our insurers
  • Potential business partners or acquirers
  • Courts and regulatory authorities where required
  • Subcontractors providing diagnostic or support services
  • Third-party APIs used by ESR or SigStudio (e.g., GA, tracking)

We never sell your personal information.

6. Overseas Disclosure

Some third-party providers store data outside Australia, including:

  • USA
  • EU
  • UK
  • Singapore
  • Other global AWS locations

We take reasonable steps to ensure data stored overseas is protected.

7. Your Rights and Controlling Your Information

Your Choice

You may choose not to provide personal information; however, this may limit your ability to use ESR or SigStudio.

Access

You may request access to personal information we hold about you.

Correction

You may request correction of inaccurate information.

Unsubscribe

You may opt out of marketing communications at any time.

Complaints

You may lodge privacy complaints directly with us or the OAIC.

8. Storage and Security

We implement industry-standard security measures including:

  • Encryption
  • Access controls
  • Audit logging
  • Firewalls and secure hosting

No data transmission online is completely secure, and users accept transmission risk.

9. Cookies

Updated to reflect your multi-app ecosystem.
(Available in full in your original text; included unchanged except where modernised.)

10. Links to External Websites

We are not responsible for external sites linked from our website or apps.

11. Changes to This Privacy Policy

We may update this Policy at any time by publishing the revised version on our website(s).

12. Contact Us

LoadOut Pty Ltd
ABN 42 150 978 359
Email: support@emailsignaturerescue.com

Appendix 1 — GDPR & UK GDPR Privacy Rights

This Appendix applies to individuals located in:

  • The European Union (EU)
  • The European Economic Area (EEA)
  • The United Kingdom (UK)

For these individuals, LoadOut Pty Ltd processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR, and the Data Protection Act 2018 (DPA 2018).

1. Legal Basis for Processing (GDPR Art. 6)

We will only collect and process your personal data where we have a lawful basis to do so. These include:

(a) Consent

Where you have provided clear consent (e.g., marketing emails, optional features).

(b) Contractual Necessity

Where processing is required to provide ESR/SigStudio services, installers, extensions, or to fulfil our contractual obligations to you.

(c) Legal Obligations

Where we must process your data to comply with applicable laws.

(d) Legitimate Interests

Where processing is necessary for our business operations, such as:

  • Improving ESR/SigStudio
  • Preventing fraud
  • Ensuring system security
  • Supporting and diagnosing installation issues
  • Analytics that do not materially impact your rights

We will always balance legitimate interests against your privacy rights.

2. Your Rights Under GDPR / UK GDPR

Individuals located in the EU/EEA/UK have the following rights:

(a) Right to Access

You can request a copy of the personal data we hold about you.

(b) Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

(c) Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data in certain circumstances, including where:

  • It is no longer needed
  • You withdraw consent
  • You successfully object to processing
  • Processing was unlawful

We may retain data where legally required.

(d) Right to Restrict Processing

You may request that we limit how we use your data under specific conditions.

(e) Right to Data Portability

You may request a copy of your data in a structured, machine-readable format so you can transfer it to another provider.

(f) Right to Object

You may object to processing where we rely on legitimate interests, including profiling.
You may also object to direct marketing at any time.

(g) Right to Withdraw Consent

Where we rely on consent (e.g., marketing), you may withdraw it at any time.

(h) Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or significant effects.

3. International Data Transfers

LoadOut Pty Ltd is located in Australia.
When personal data is transferred outside the EU/EEA/UK, we use one or more of the following protection mechanisms:

  • Standard Contractual Clauses (SCCs)
  • Equivalent UK International Data Transfer Agreements (IDTAs)
  • Adequacy decisions (where applicable)
  • Contractual safeguards with third-party processors

We ensure all third-party providers implement appropriate technical and organisational safeguards.

4. Data Controllers & Data Processors

Data Controller

LoadOut Pty Ltd acts as the Data Controller for:

  • ESR & SigStudio account information
  • Website and analytics data
  • Billing information
  • Installer usage data
  • Marketing preferences

Data Processor

When your organisation uses ESR/SigStudio to manage signatures for staff, we may act as a Data Processor on behalf of the organisation.

In these cases, your employer acts as the Data Controller, and:

  • We only process data under their instructions
  • They determine lawful basis, retention schedules, and purposes
  • We provide appropriate technical and security safeguards

5. How to Exercise Your Rights

To exercise any GDPR/UK GDPR rights, you may contact us at:

Email: support@emailsignaturerescue.com
Subject line: GDPR/UK GDPR Rights Request

We will respond within 30 days (or notify you if additional time is required due to complexity).
You may be required to verify your identity before we process your request.

6. Complaints to Supervisory Authorities

If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.

EU Residents

Find your authority here:
[Archived content]Data Protection Authorities - European Commission

UK Residents

Information Commissioner's Office (ICO):
Make a complaint

We encourage you to contact us first so we can attempt to resolve your concerns.