Privacy policy

1. The short version

We collect what we need to sign documents and prove who signed them, and nothing else. We don't sell your data, show ads or use your documents to train anything. Documents signed without an account are deleted 24 hours after signing.

2. What we collect

• Account details. Your email address and name, and a securely hashed password if you set one. If you sign in with a one-time link, we keep a hashed copy of the link until it is used or expires.
• Documents and signatures. The PDFs you upload, the fields you place, the signatures and initials you draw, type or upload, and the signed files we produce.
• Signing evidence. For each signer: name, email, the IP address and browser (user agent) used, and when they viewed, consented, signed or declined. This forms the audit trail.
• Email delivery events. Whether an invitation or notification was sent, delivered or bounced, as reported by our email provider.
• Cookies. A sign-in cookie for accounts, and a cookie that lets you return to a document you signed without an account. We don't use advertising or tracking cookies.

3. How we use it

• To run the service: store and render documents, send invitations and reminders, and stamp signatures.
• To produce evidence: the signing certificate and a hash-chained event log for each document.
• To keep signedpdf.app secure: rate limits, abuse prevention and investigating problems.
• To contact you about your account or important changes to the service.

4. How long we keep it

• Documents signed without an account: deleted 24 hours after signing, or 24 hours after upload if never completed.
• Documents in an account: kept until you delete them or close your account. The audit trail is kept with its document and deleted with it.
• Account details: kept while your account is open and deleted when you close it, except where the law requires us to keep a record for longer.

5. If someone sent you a document

When you sign a document someone sent you, they decide what is in it and who receives it. We process your details on their behalf to collect your signature and record the evidence. The sender sees your name, email, signing times and IP address on the signing certificate. Other signers see only the names needed to show the signing order.

6. Who we share it with

We share data only with the providers that run signedpdf.app for us, under contracts that limit their use of it:

• Email delivery (currently Resend): recipient addresses and message contents, to send invitations and notifications.
• Hosting and file storage (provider to be named before launch): the encrypted files and the database that runs the service.

We may also disclose data when the law requires it. We will tell you if we can.

7. Security

Files are encrypted at rest with AES-256 and in transit with TLS. Signing and sharing links use long random tokens that we store only as hashes. Report a vulnerability to security@signedpdf.example.

8. Your rights

You can see, download and delete your data. In Settings → Data you can export your documents or delete your account and everything in it. Depending on where you live, you may also have the right to correct your data, object to or restrict how we use it, and complain to a data protection authority. To use any of these rights, email support@signedpdf.example.

9. Children

signedpdf.app is not meant for children, and we don't knowingly collect their data.

10. International transfers

Our providers may process data outside your country. Where that happens, we will rely on recognised safeguards such as standard contractual clauses. Details will be added here before launch.

11. Changes to this policy

We will post any update here and change the date at the top. For significant changes we will also email account holders before they take effect.

12. Contact

Questions about privacy: support@signedpdf.example.