Who is responsible
Alectiv Group AB, company reg. no. 559283-6042 (“we”, “us”) is the data controller for personal data processed in the Zigna service, unless a separate agreement with your organisation states otherwise. For customer organisations that use Zigna in their business, the customer may be the controller and we the processor under the applicable agreement.
Privacy contact: support@zigna.se.
What data we process
We process data needed to deliver the service: name, email, phone number for SMS verification, company name, authentication data, document metadata, signing history, and technical logs (IP address, browser, timestamps).
When users log in, sign documents, or verify identity with BankID, we process data returned on authentication or signing completion, including name and personal identity number (personnummer). Where possible, personal identity numbers are stored in masked form. BankID is provided via our provider TIC.
Content in documents and quotes is stored so it can be viewed, signed, and archived according to your settings. You retain ownership of your content.
Why we process data
Processing is carried out to provide and improve the service, authenticate users, manage accounts, send signing invitations, create signing evidence, meet legal obligations, and protect against abuse.
Legal bases are typically contract (GDPR Art. 6(1)(b)), legitimate interest (Art. 6(1)(f)), or consent where required.
Storage and transfers
Data is stored in the EU/EEA with established cloud providers and appropriate security measures. We use subprocessors for email, SMS, payments, infrastructure, and BankID (TIC), among others.
We do not sell personal data. Data is shared only when needed to deliver the service, comply with law, or with your explicit consent. Signing status, logs, and signed PDFs may be shown to the customer organisation that sends the document and to the relevant recipient.
Retention
Account data is kept while the account is active and for a reasonable period afterwards for security and bookkeeping.
Documents, signing history, and signing evidence are retained according to your settings, agreements, and legal requirements. When data is no longer needed it is deleted, anonymised, or otherwise made non-identifiable. You can delete drafts and completed documents when they are no longer needed. Erasure requests under GDPR are handled via support@zigna.se.
Your rights
You have rights of access, rectification, erasure, restriction, portability, and objection under GDPR.
You may also lodge a complaint with your supervisory authority. Contact support@zigna.se and we will help resolve questions directly.
Cookies and analytics
We use essential cookies for login and security. Analytics may be used in aggregated form to understand how the site is used.
You can control cookies in your browser. Some features require essential cookies to be enabled.
Updates
We may update this policy when the service or legal requirements change. Material changes are communicated by email or in the product.
Last updated: July 2026.