Data & Account Deletion

1. What data we hold

Before asking for deletion, it helps to know what exists at all:

• account details — name, email, phone, language and role; and the business name and its details;
• the documents you uploaded, the fields you placed, and the signed documents;
• the contacts you entered, and each document’s recipient details;
• the signature images collected;
• evidence logs — opening, verification, consent, signing, IP address, device identifier and timestamps;
• billing records and invoices, and the card token held at our payment provider (not the card number — we never hold that);
• server logs and error events, and support correspondence.

2. Deleting the whole account

Today deletion is by request rather than by button. Send a message to info@basmasign.com from the account’s email address, with the subject “Account deletion”, and in the body: the business name, the account email address, and the registered phone number if you know it.

When the request is carried out, the following are deleted:

• the account and access to it, and every team user in it;
• the documents you uploaded, drafts and templates;
• contacts and recipient details;
• account settings, branding and logo;
• the subscription is cancelled and no further charges are made.

Deletion cannot be undone. Download whatever you need before asking for it — download stays open at every account status, including suspended and cancelled.

3. What survives deletion — and why

Three things survive a deletion request, each for a different reason:

• sealed documents and their evidence packs — while the 365-day retention policy on the storage bucket applies to them, a copy cannot be removed before that period ends. It is the same policy that stops anyone, us included, from altering evidence after the fact;
• billing records, invoices and payment documentation — seven years, as Israeli bookkeeping rules require;
• data needed for an existing legal proceeding, a legal defence, or another legal obligation — for as long as it is needed.

Anything that remains is held under restricted access and only for the purpose it was kept for. When the period ends, it is deleted. Our answer to your request says explicitly what was deleted and what remained.

Note the other side of this: a document signed through you is also the signer’s document. If deleting the account would erase evidence the signer may need, that decision — and the responsibility towards the other side — is yours.

4. How to ask, and what to include

Write to info@basmasign.com. So that we can act without exposing data to the wrong person, the request needs to let us identify you:

• account holder: send from the account’s email address, and state the business name;
• signer: state the phone number or email address the document was sent to, and the name of the business that sent it if you know it;
• if you cannot send from the registered address, we will ask for further verification. We will not send or delete data on a request we could not verify.

Write in Hebrew, Arabic or English — we answer in the same language.

5. How long it takes

• acknowledgement — within 5 business days;
• the deletion itself, and a detailed answer — within 30 days of the request (or of verification being completed);
• backup copies — removed with the backup cycle, and no later than 90 days after deletion;
• anything kept under section 3 — deleted at the end of the period stated there.

6. Partial deletion — without closing the account

You don’t have to delete everything. A single document, a single contact or a team member can be deleted from inside the service, taking effect immediately.

For a document that has already been signed and sealed: removing it from the account does not change the signed document already delivered to the parties, and does not delete a copy held under the retention policy (section 3).

7. If you received a document to sign

The business that sent you the document is the controller of your data — it chose to contact you and it decides what happens to the document. The direct route is to ask them.

You can also write to us. We will pass your request to the sending business, confirm to you that we did, and handle ourselves what is within our control — for example stopping messages to you and removing your contact details from lists that are not part of a document’s evidence.

What we cannot do: edit a sealed document or an evidence log. They are built to be unalterable, and that is why they can be relied on — including when the person relying on them is you.

8. Stopping WhatsApp messages

Reply “STOP” in the conversation, or block the number in WhatsApp. We stop sending to that number across the whole platform — not only on behalf of the business that sent the last document.

Delivery data already recorded as part of a document’s evidence stays as it is; stopping applies to future messages.

9. If the answer isn’t good enough

Come back to us at info@basmasign.com. If it is still unresolved, you may approach the Privacy Protection Authority at the Ministry of Justice, and your right to go to court remains in any event.

Kamal Agbaria — licensed sole proprietor (עוסק מורשה), no. 034650887. Almadina 62, Umm Al Fahem, Israel.