What we hold, and who else touches it.

Account details. Your email address, the name you enter at signup, and authentication records held by Supabase. The application does not store a plaintext copy of your password.

Workspace content. The documents you upload or generate, the values entered into their fields, signatures drawn or typed, templates, contacts, reusable profiles, saved services, and workspace branding.

Signer details. For each person you send to: the name and email you supply, their signing order and role, whether they consented to sign electronically and when, and any question or decline they submit.

Activity records. Each meaningful event on an envelope — sent, delivered, viewed, signed, declined, reminded, bounced, executed, voided, cancelled — with a timestamp and, where the request exposes it, the originating IP address and browser user-agent string. These records support the activity trail and certificate of completion; they do not guarantee legal enforceability.

The application uses cookies for account sessions, workspace selection, and signer access-code verification. Browser storage holds theme preferences and recovery drafts, which can include document text, recipient details, field positions, and entered values. Use a trusted device and clear site data when you no longer need those recovery copies.

The app records operational errors and workflow events to diagnose failures and improve reliability. The current application does not include advertising pixels or session replay.

To provide document creation, analysis, search, signing, delivery, and recordkeeping; maintain account and workspace security; and diagnose service failures. Field detection can run after upload, and term extraction can run after execution as part of those workflows.

Content is shared with the recipients and workspace members whose permissions allow access, with service providers below, and with integrations you enable. Webhooks may deliver agreement events to endpoints configured by your workspace.

Workspace logos are stored at public URLs so they can appear in emails and signing pages. Do not upload confidential content as a logo. Removing a logo from settings stops its use in new branding, but does not erase previously delivered emails, cached copies, or the previously uploaded file.

Core service providers:

Supabase — the database, authentication, and file storage. This holds everything: documents, signed PDFs, signer details, and activity records.

Anthropic — the AI features. Document PDFs or text, prompts, and relevant context may be processed for field detection, drafting, review, extraction, and search. Provider retention and training terms, and the settings applicable to this account, must be confirmed before the final policy is published.

Resend — outbound email. Sees recipient addresses, names, document titles, and signing links, because those are the contents of the message.

Vercel — hosting. Sees requests in transit and standard server logs.

A formal, versioned subprocessor list with each company's own terms and data locations is [to be published]. We would rather name the four plainly here than claim a document we have not produced.

Archiving hides an agreement from the active list; it does not delete its records. The delete workflow can remove eligible unsigned documents and associated drafts. Documents with signature events or completion certificates are protected from ordinary deletion in the app.

Executed documents, certificates, and activity records currently have no automatic deletion schedule. Retention periods, backup handling, and exceptions for legal obligations and individual data rights must be settled before publication. Retaining an audit trail does not by itself remove applicable deletion rights.

To have a workspace and its contents removed, write to [privacy contact address].

Described in specifics on the security page — sealing, isolation, activity records, and account security, including what we deliberately do not claim.

When this page changes materially we will say so here and date it. Since it is a draft and not yet in force, the first material change will be the version a lawyer has approved.