Privacy policy

Last updated: 24 September 2026

Signup.Name is a service for digital business cards, contacts and events with registration. This policy explains which personal data we process, why, for how long and what rights you have. We have tried to keep it readable – get in touch if anything is unclear.

1. Who is responsible for your data?

The data controller is Securum, contact person Jan Eriksson. You reach us at hello@signup.name.

2. What data do we process – and why?

Account

E-mail address, password (stored only as a one-way hash), name and chosen language. We need them so that you can log in, and to send the e-mails that belong to the account: confirmation, login link and password reset.

Profile and business card

What you enter yourself: name, contact e-mail, phone numbers, profile photo, job title, company, presentation, logo, links and addresses. You choose which details the card shows. A published card can be seen by anyone who has the link or the QR code. Cards are marked so that search engines should not index them. If you unpublish the card it stops being shown immediately.

Contacts – when you save someone's card

We store which card you saved, when, and – if you came from an event – which event it was.
The person whose card you save can see that you saved it: your name, the e-mail address you log in with and, if you have a published card, your card. They can also download the details to their own contacts. The service is built on mutual networking, and this is stated where you save.
If you choose “Share my card”, your card is added to the other person's contacts.
A contact's details always come from the person's current card – we keep no copy. If the person removes their card you only see the name.

Your private notes

Notes, log entries and follow-up dates that you write about a contact are shown only to you – never to the contact, other users or organizers. Remember that you are responsible for what you write about other people: do not record sensitive information about someone else. If you remove a contact, your notes about it are deleted.

Events – when you register

Name and e-mail address, plus what the organizer has chosen to ask for: company, company registration number, job title, phone, message and companions.
You can register without an account. The details are then stored on the registration, and you manage it through the personal link in the confirmation e-mail. If you later create an account with the same e-mail address, the registration is linked to the account.
The event's organizer and co-organizers see your registration, your status (registered, waiting list, cancelled) and whether you have checked in.
Dietary preferences and allergies can reveal information about health or religion. We only process them if you fill them in yourself – that is your consent. They are shown to the organizer only, for planning food and drink, and you can change or remove them through your registration.
The participant list is off by default. If the organizer has switched it on, you choose whether to be shown. Only participants who share themselves see the others who share, and what is shown is name, company, job title and your business card if you have one.
With drop-in via QR code at the venue the same details are stored, and that you checked in.

Events – when you organize

The event's content, cover image and who the co-organizers are. Your name is shown as organizer on the public event page. As an organizer you are responsible for how you use the participants' details outside the service, for example if you print or copy the list.

E-mails we send

We only send e-mails that belong to what you do in the service: account e-mails, registration confirmations, a place from the waiting list, cancellations and cancelled events. If you registered without an account you may, after the event, receive at most two e-mails reminding you that you can create an account. We send no advertising and we do not sell data.

Cookies and technology

We only use necessary cookies: for login, chosen language, protection against forged forms and for completing a registration. We use no cookies for advertising or tracking and no third-party analytics. The server keeps technical logs (time, IP address, page, errors) for operations and security.

3. Legal basis

Contract – to provide the service: account, business card, contacts, events and registrations.
Consent – dietary preferences and allergies, being shown in a participant list and sharing your card with someone. You can withdraw a consent at any time by changing or removing the information.
Legitimate interest – security, troubleshooting and preventing abuse, and the reminder to those who registered without an account.

4. Who receives the data?

Other users – in the ways described above: anyone with the link to your card, the organizer of an event you register for, participants you have chosen to be shown to, and the person whose card you save.
Suppliers who help us run the service (data processors): our hosting provider for servers and database, and Twilio SendGrid for sending e-mail. SendGrid is a US company; the transfer is protected by the EU standard contractual clauses or an equivalent approved mechanism.
Authorities, when we are required to by law.

5. How long is the data kept?

Account, profile, cards, contacts and notes – for as long as you have the account. You can remove individual details or the whole account at any time.
Inactive accounts – if you have not logged in for three years we e-mail you. If you do not log in within 30 days after that, the account is deleted.
Accounts that were never confirmed – deleted after 30 days.
Dietary preferences and allergies – deleted 30 days after the event.
Registrations without an account – anonymized 12 months after the event. All that remains is that a place was booked, without name or contact details.
Registrations linked to an account – for as long as the account exists, so that you can see your history.
Removed data – finally purged from the system within 90 days. Private notes are deleted at once.
Technical logs – at most 90 days.

6. Your rights

You have the right to know which data we hold about you, to have errors corrected, to have data erased, to receive your data in a portable format, to object to processing based on legitimate interest and to withdraw consents. Most of it you do yourself under My account; otherwise e-mail hello@signup.name and we will help you within one month.

If you are unhappy with how we handle your data you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

7. Changes

If we change the policy in a way that affects you, we will tell you in the service or by e-mail before the change takes effect. The date at the top shows when the policy was last updated.