Service operator
The legal operator name is configured through the deployment before launch.
Information we store
We store your username, email address when provided, a bcrypt password hash, account status, signing usage counters, document names and page counts, and billing and access status including pack expiry when applicable. We do not store the contents of your PDFs or signature images.
Documents stay local
PDF signing happens client-side in your browser. Documents are not uploaded to E-Signature servers and are not stored by us. Your browser may retain locally saved signatures if you choose to use that feature.
Payments
Payments, invoices, taxes, and refunds are processed by Paddle.com as Merchant of Record. We do not receive or see your full card number. Paddle may process payment and billing information under its own privacy terms.
Cookies and analytics
We use one httpOnly signed session cookie to keep you signed in. We do not use the cookie to track you across unrelated sites. Vercel Analytics may collect aggregated usage information to help us understand service performance.
Retention and deletion
We retain account metadata while your account is active and for a reasonable period needed for security, billing, and legal obligations. Use the support contact to request access, correction, or deletion. An administrator can delete accounts, which also removes stored document metadata.
Your rights
Subject to applicable law, you may request access, rectification, erasure, portability, restriction of processing, or information about how your data is used. You may also contact your local data protection authority.
Security
Passwords are protected with bcrypt hashing. Sessions use signed, httpOnly cookies with secure transport in production. No online system is completely risk-free, so protect your account credentials and keep your devices secure.
Children and changes
E-Signature is not directed to children under the age required by applicable law. We may update this policy as the service changes and will publish the revised version on this page.
Contact
For privacy questions or requests, use the contact page.