GewapeSign Add-ins Privacy
What GewapeSign for Outlook, Word, Chrome and Edge can see, what they send, and where it goes.
GewapeSign for Outlook and Word (one Microsoft 365 add-in) and GewapeSign for Chrome and Edge (one browser extension) are made by Gewape Cloud Rwanda Limited. They are small windows onto your GewapeSign account. This page adds to the GewapeSign Privacy Notice, which applies to everything you send.
They act only when you click
Nothing runs in the background. The add-ins do not read your mailbox, your other documents, your browsing or any web page on their own. They read a file only when you choose it and click Send.
What they handle
- Your sign-in. you sign in on the GewapeSign sign-in page (email and password, Gewape ID or a passkey) and choose the team the add-in sends into. The add-in keeps a sign-in token on your device, never your password
- The file you choose. the Outlook attachment, the open Word document (exported to PDF by Word), or the file or PDF tab you pick in the browser
- Signer names and email addresses. the people you add. In Outlook, the people on the open email are suggested; nothing is sent until you click Send
- Document status. titles, signers and status of your team's documents, shown in the add-in
Where it goes
Straight from your device to GewapeSign at app.gewapesign.com, over an encrypted connection. GewapeSign stores documents in Kigali, Rwanda. The add-ins contain no analytics, advertising or tracking code and send nothing to anyone else. Outlook and Word load Microsoft's Office.js library from Microsoft, which Microsoft requires for every Office add-in.
What we never do
We do not sell this data, use it for advertising, use it to train AI models, or use it for anything other than sending and tracking the documents you choose.
Permissions, and why
- Outlook: read and write the open item. to read the attachment you pick and to attach the signed copy to the message you are writing
- Word: read the document. to export the open document to PDF when you click Send. The add-in never changes your document
- Chrome and Edge: identity. to open the GewapeSign sign-in window
- Chrome and Edge: storage. to keep your sign-in on this device (never synced to other devices)
- Chrome and Edge: the current tab, when you click. to download the PDF you are viewing, only when you choose “the PDF open in this tab”
- Chrome and Edge: app.gewapesign.com. to talk to GewapeSign
Your control
Sign out in the add-in, or disconnect it from any device in GewapeSign under Settings → Connected apps: it stops working at once. Team admins can also remove it from the team's API tokens. Every document the add-in sends is recorded in your organization's audit log.
Contact
Questions or requests about your data: support@gewapesign.com. You may also complain to the National Cyber Security Authority of Rwanda.