الخصوصية

5. How the Software handles your keys and data

1. Your private key stays on your hardware token. The Software asks the token to create a signature; it never reads, copies or exports the key.
2. Your token PIN is entered into the macOS system dialog or, for PKCS#11 tokens, passed directly to the token. The Software does not store or transmit it.
3. Signing happens on your Mac. The Software accepts signing requests only from https://invoicing.eta.gov.eg and only on your own computer. It never sends your documents, your PIN or your private key anywhere, and it does not collect analytics or telemetry.
4. What the Software sends to our server, and why:
   • Free signatures: the signatures you make, so we can count them. A signature contains your signing certificate (including the name and tax registration number in it) and a fingerprint (hash) of the document, not the document itself.
   • Licence renewal: every few weeks while you sign, your licence and one extra signature made by your token, so we can confirm the licence is still valid (§ 10).
   • Update checks: once a day, the Software asks which version is current. This reveals your internet address, as any internet request does.
5. Download page: to download the Software you give us your name, email address, company and tax registration number; we also record your country. We use these details to support your licence and to send you information about ETA Signer. We do not sell or share them.
6. Our server runs on Cloudflare, Inc. infrastructure, which may store data outside Egypt. To ask what we hold about you, or to have it deleted, email etasigner@youssefmaged.com. Deleting the record of your free signatures does not grant new free signatures.