Privacy Policy

Last updated: March 13, 2026

1. Introduction

PDFDocSign ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PDF document signing service at pdfdocsign.com (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Authentication credentials (managed by Supabase Auth)

2.2 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other financial information on our servers. Please refer to Stripe's Privacy Policy for details on how they handle your payment data.

2.3 Document Data

PDFDocSign is designed with a privacy-first approach. PDF documents you upload are processed in your browser and are not stored on our servers unless you explicitly choose to save them. Signed documents are stored temporarily to facilitate download and sharing, then deleted according to our retention schedule.

2.4 Usage Data

We automatically collect certain information when you use the Service, including:

  • IP address
  • Browser type and version
  • Pages visited and features used
  • Date and time of access
  • Device information

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process transactions and manage your subscription
  • Send you service-related communications
  • Respond to your requests and support inquiries
  • Monitor and analyze usage patterns to improve the Service
  • Detect, prevent, and address technical issues and fraud
  • Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate PDFDocSign:

Supabase

We use Supabase for authentication and database storage. Your account data is stored securely on Supabase infrastructure. See Supabase's Privacy Policy.

Stripe

We use Stripe for payment processing. When you make a purchase, your payment information is sent directly to Stripe. See Stripe's Privacy Policy.

Vercel

Our Service is hosted on Vercel. See Vercel's Privacy Policy.

5. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential cookies: Required for authentication and core functionality
  • Preference cookies: To remember your settings and preferences
  • Analytics cookies: To understand how users interact with the Service

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Uploaded documents that are processed in-browser are not retained by us. Documents stored on our servers for sharing or collaboration purposes are automatically deleted after 90 days of inactivity.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL) and at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to processing of your personal data
  • Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@pdfdocsign.com. We will respond to your request within 30 days.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us at support@pdfdocsign.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@pdfdocsign.com