Docusign Identity Wallet for QES Product Privacy Notice
Version Date: November 11, 2024
About This Notice
At Docusign, protecting privacy is a key priority. This Product Privacy Notice (“Notice”) is provided to offer transparency about how Docusign, Inc. and its affiliates (“us,” “our,” or “we”) collect, use, store, or otherwise process personal information about customers and other individuals (collectively "you") who access or use the Docusign Identity Wallet (the “Service(s)”). By using our Services, you understand that we will collect, use, store, transfer, and disclose data, including your personal information, as described in this Notice. This Notice is to inform you about specific practices that pertain to your use of the Services and is to be considered alongside Docusign’s Privacy Notice, which supplements the specific terms of this Notice. If specific terms in this Notice conflict with the Docusign Privacy Notice, the terms of this Notice shall apply for the purposes of the use of the Services.
1. Docusign Identity Wallet Overview
Docusign Identity Wallet allows Docusign customers to save their identity verification information and offers the ability to re-use this verification to generate digital signatures (if applicable) such as AES and QES in future transactions completed through Docusign. This feature allows users to reduce the number of times they have to engage in the ID verification process and ties future transactions to the persistent identification credentials stored with Docusign. A limited amount of data and personal information required for the identity verification and digital signature will be retained by Docusign to enable the customer to reuse their credentials via the ID Wallet. The terms of use of the eSignature products and Identity services associated with the Service are outlined in the notices associated with those products and services.
2. Personal Information Processed by Docusign Identity Wallet
When our customers use the Docusign Identity Wallet Services, Docusign acts as both a processor and as a controller with respect to the Services and persistent storage of personal information to provide the Service.
Categories of Personal Information Collected | Purpose for Processing | Docusign’s Role |
Identifiers Full name, phone number, email address, nationality, and all information extracted from the identification type presented to create the Services. This may include the following: address, birth place, birth date, license or identification expiration date, document number, document type, gender, identification issue date, identification place of issue, identification issuing state code, married name, nationality, personal ID number, signature images, tax identification numbers. | Provide the Services. Analyze and improve the Services and develop new features and products. Troubleshoot the Services, including answering support questions and resolving disputes. Manage the Services platform, including support systems and security. Prevent, investigate, and respond to fraud, unauthorized access to or use of our Services, breaches of terms and policies, or other wrongful behavior. Comply with legal obligations. Meet legal retention periods. Establish, exercise, or defend our rights in legal claims. | Processor and/or Controller |
3. Data Residency, Sharing, and Onward Transfers Processing including Subprocessors
a. Data Residency
The Docusign ID Wallet defaults to storing your data in the same geographic location where your eSignature account is provisioned. If you are creating a Docusign Account at the same time as your ID Wallet, then the storage of your data will default to the region where your ID type is located. In addition to this, Subprocessors may process your data in other locations or jurisdictions based upon the Product features and functionalities.
b. Subprocessors
The Service is hosted in Microsoft Azure and is dependent upon identification provided by other Docusign products and services, such as eSignature. The Service also may rely on or interoperate with other Docusign products and services, including (i) Docusign Identify and (ii) Docusign QES or AES. You may view Docusign’s Subprocessor List at https://www.docusign.com/trust/privacy/subprocessors-list.
c. Cross-Border Data Transfers
Subject to applicable privacy and data protection law, we may transfer your personal information outside of your jurisdiction, including for further processing. Docusign has adopted a number of EU transfer safeguards, including Binding Corporate Rules to facilitate the transfer of personal information from the European Economic Area and/or United Kingdom ("EEA") to Docusign outside of the EEA and also employs EU Standard Contractual Clauses as an additional transfer safeguard. Transfers outside the Docusign group are only made to organizations that agree to adhere to the privacy and data protection standards in our Binding Corporate Rules or use another valid alternative (such as EU Standard Contractual Clauses) under data protection law. You may view our Binding Corporate Rules at https://www.docusign.com/trust/privacy/bcrp-privacy-code and https://www.docusign.com/trust/privacy/bcrc-csb-code.
4. Data Retention
Docusign ID Wallet will store your data for a minimum of three years. You may elect to delete this information at any time via the Services, with the exception of data required to be retained by Docusign for legal, wrongful behavior, or compliance purposes.
5. Accessing or Deleting Your Information
Your data is accessible for download or deletion within the Docusign Wallet product experience, as described below.
a. Access
To access your data, navigate to your Docusign Wallet, click Actions, and select Extract. You will need to re-verify your credentials, and then you may download the file provided.
b. Delete
To delete your data, navigate to your Docusign Wallet, click Actions, select Delete, and follow the prompts to delete your data.
c. Correction
Due to the nature of the Service, we are technically unable to support data correction as this would require a new identity verification. If the information in your Docusign Wallet is incorrect, you should delete your wallet and complete a new identity verification based on your updated identification credentials.
6. Legal Notice
We may amend this Notice or Docusign’s Privacy Notice to reflect changes in applicable law, our companies, our Services, our data processing practices, or advances in technology. Our use of the personal information we collect is subject to this Notice, and the Docusign Privacy Notice is in effect at the time such personal information is used.
7. How to Contact Us
For questions or complaints regarding our use of your personal information or this Notice, please contact us at privacy@docusign.com or by sending a letter to DocuSign Inc., Attention: Privacy Team, 221 Main Street, Suite 1550, San Francisco, CA 94105. If you are a visitor from the EEA, please contact DocuSign International (EMEA) Ltd at privacy@docusign.com or by sending a letter to DocuSign International (EMEA) Ltd, Attention: Privacy Team, 5 Hanover Quay, Ground Floor, Dublin 2, Republic of Ireland. If you are a customer or user in another country, please visit here for other ways to contact Docusign. If your country is not listed, please email privacy@docusign.com.