The terms for using TapSign

1Who provides TapSign

TapSign is made and operated by BILOUD SRL, a company registered in Romania, VAT number RO34723223, trade register number J2015002244239. On this page, "we" is that company and "you" is whoever is using TapSign.

These terms cover the TapSign apps, this website and the sync API behind them. Using any of them means accepting what is on this page. If you would rather not, the app uninstalls the way any other app does.

2What TapSign is, and what it is not

TapSign puts an electronic signature on a PDF using a certificate you already hold, on a token or on your electronic ID card. The signing happens on your device. We do not see the document and we keep no record that you signed one.

TapSign is not a certification authority, not a trust service provider and not a timestamping authority. We do not issue certificates, we do not certify anybody's identity, and we do not run a validation service. We are the software between your document and your chip.

3Signing is free

Signing documents with your own certificate costs nothing, on every platform we ship, with no charge per signature, no limit on how many you make, no subscription and no card details asked for. That is not an introductory price and not a trial period. It is the part we do not intend to charge for.

4Your certificate is between you and whoever issued it

The certificate is not ours. You obtained it from a trust service provider or from the Romanian state, on their terms, and that relationship is yours rather than ours. Whether it is valid, whether it has been revoked, when it expires, what its PIN is and how many attempts remain on the token are all matters between you and the issuer.

If a certificate turns out to be expired, revoked or unsuitable for what you needed it for, the signature TapSign produced is still exactly the signature your chip produced with it. We had no part in issuing it and there is nothing we can do to repair it.

5What a signature is worth, and what we do not promise

A signature TapSign produces is a cryptographic fact, and anyone anywhere can verify it in Adobe Acrobat. Whether a particular court, authority, portal, bank or counterparty accepts it is a separate question, answered by their rules and by the law where they are. We do not promise any particular one of them will.

So, plainly: we do not promise that a given state portal will accept a given certificate, that a signature will show a green tick in a given viewer, or that an advanced signature will pass where a qualified one is required. Where the app knows the difference it says so, on the guides page and on the security page, and both are written to be accurate rather than flattering.

TapSign does not currently embed a trusted timestamp or revocation data, so its signatures are not long-term validation signatures. If what you are doing needs one, TapSign is not the right tool yet. We would rather write that here than let you find it out afterwards.

6An account is optional

The app signs without one. An account carries your settings between your own devices, and can hold an encrypted vault of documents you put there. It holds no certificates and no keys. There is no password: you sign in with a one-time code, a passkey or Sign in with Apple.

You are responsible for the address on the account and for the devices signed in to it. If you lose access to that address and hold no passkey, we cannot let you back in, because nothing else proves the account is yours.

7The vault is optional, and losing it is final

The vault does not exist until you turn it on. When you do, documents are encrypted on your device with a key that never reaches us.

This part is worth reading twice. If you lose every way into your vault, the documents in it cannot be recovered by anybody, us included. We cannot reset it, send you a link, or open it under a court order, because no copy of your key exists here to be used. The recovery code is shown once, when the vault is created. Write it down and keep it where you keep a passport.

The vault is a convenience, not a backup service. Keep your own copy of anything that exists nowhere else.

8How you may use it

Sign your own documents, with a certificate issued to you, for things you have the right to sign. Beyond that the list of things not to do is short.

• Do not sign as somebody else, or use a certificate that was not issued to you.
• Do not use TapSign to forge a document, backdate one, or misrepresent who signed it.
• Do not attack the service: no trying to get into other people's accounts, no scraping, no load meant to cause an outage, no working around the rate limits.
• Do not put unlawful material in the vault, and do not use it as general file hosting. It takes documents, within a size limit and a published list of extensions.
• Do not resell TapSign or present it as your own product.

If an account is used for any of that we may suspend or close it. Where the account belongs to a consumer and the problem is not serious, we will say so first and give you a chance to put it right.

9Availability, and software that is still evolving

TapSign is in testing on Apple platforms and is provided as it stands today. Features change, and some of what the apps do now will work differently later.

We do not promise a level of uptime for this website or for the sync API. Signing does not depend on either: it works with no network at all, which is the whole point of doing it on the device.

10Paid extras, later and optional

There is nothing to buy today. No subscription exists, no paid tier exists, and nothing in the app is behind a payment.

At some point there will be a small optional purchase for things that cost us money to keep running, such as encrypted storage beyond a certain size. It will be optional, it will be described and priced before anyone is asked for anything, and putting your own signature on your own document will not be part of it. Until such a purchase exists, nothing on this page about paying applies to anything.

11What we do not warrant

TapSign is provided without warranties beyond those the law does not let us exclude. We do not promise it is free of defects, that it fits a particular purpose of yours, or that it will run uninterrupted.

That exclusion goes as far as Romanian and European Union law allows and not a step further. If you are a consumer, the law gives you guarantees about digital content and digital services that no wording on this page can remove, and those guarantees apply.

12Liability

We are liable for damage caused intentionally or by gross negligence, and for anything else the law does not permit us to exclude, including death or personal injury. Nothing here limits that.

Otherwise, and as far as the law allows, we are not liable for indirect or consequential loss, for lost profit or business, for data you kept no copy of, or for a document being refused by somebody who was never party to this agreement. Where liability may lawfully be capped and TapSign has cost you nothing, the cap is what you have paid us, which is nothing.

This section does not touch the rights a consumer has under Romanian and European Union law.

13Your consumer rights are untouched

If you use TapSign outside a trade, business or profession, you are a consumer, and consumer law applies whatever this page says. Mandatory rules on unfair terms, on the conformity of digital content and digital services, and on where a consumer may bring a case are not displaced by anything written here.

If a term on this page turns out to be unenforceable, it is simply not applied and the rest stands.

14What the vault is for

It is a place for the documents you reach for: the signed contract, a copy of your ID, the insurance policy, the papers you need at a counter twice a year and can never find. Think of it as the drawer in the desk rather than the loft.

It is not a backup service and not somewhere to keep a photo library. Not because we are policing it, but because it is built for the wrong shape of thing: files go in one at a time, there is a 50 MB limit per file, and nothing here syncs a folder or restores a disk.

There is no storage limit and no advertising. Signing is what this app is for, the vault is a convenience beside it, and later we may charge for things that cost us to run. We do not sell data. In the vault we hold sealed bytes and cannot read a name, a folder or a document.

What we can see is how much space an account takes, because a server has to. If an account grows far past what any of the above describes, we will email and ask you to bring it back within it, and we will help if you need time. If that is ignored, we reserve the right to close the account, which erases it and everything in it permanently and irreversibly. We would rather never do this, and saying so now is how it stays rare.

15Closing your account

You can stop using TapSign at any time by deleting the app. Nothing is left running behind you.

To close an account, use the button at the bottom of the account page. It erases the account and everything attached to it as you press it: your name, your phone number, your devices, your settings, your passkeys and every encrypted object in your vault. There is no queue, nobody reads a request, and we keep no copy.

Smaller steps exist too. You can remove one device from the account page, which signs it out and deletes the settings it was keeping for itself, and you can reset the vault from the app, which deletes its objects and its keys and leaves the rest of the account alone.

16When these terms change

The date at the top changes with them. If a change matters, we will say so on the site and, to anyone with an account, by email, before it takes effect. Carrying on using TapSign after that is how the new terms are accepted. If you would rather not accept them, close the account and stop using the app.

17Names that are not ours

TapSign is made by BILOUD SRL. It is not a product of, and is not affiliated with, endorsed by or sponsored by, any of the organisations whose names appear on this site because they issue the certificates or make the hardware you already own.

That includes certSIGN, DigiSign, Trans Sped, CertDigital, AlfaSign, Thales, SafeNet, Adobe, Apple, and the Romanian Ministry of Internal Affairs (MAI / DGEP), which issues the electronic identity card. Those names, and any others used the same way, are trademarks of their respective owners. We use them only to say what TapSign works with.

18Which law, and which court

Romanian law governs these terms, and the Romanian courts have jurisdiction over disputes about them.

If you are a consumer living in another European Union country, that choice does not remove the protection of the mandatory rules of your own country, and you may bring a case in the courts where you live.

Consumers in Romania may also take a complaint to the National Authority for Consumer Protection, Autoritatea Națională pentru Protecția Consumatorilor (ANPC), anpc.ro.