YOUR PRIVACY
Privacy
Draft for review before launch. Retention periods below come from the site configuration.
Browser-only PDF tools
The local signing and local compression tools process your PDF in the browser without uploading the file or signature image to DocAISign. They do not create a server document, email request or audit record. Their in-memory copy is cleared when the tab closes; downloaded files stay on your device.
Visiting these pages still makes normal website and asset requests to our server. Local processing refers to the PDF and signature content, not anonymous browsing.
Standard upload and email signing
To send a document to someone for signature, DocAISign must store it on its server until the signing is done. This also applies when you use the standard upload workflow to sign a document yourself, because the signed PDF and audit record are created on the server. We store document files encrypted (AES-256) and use them only to run the signing you asked for: showing the document to you and your signer, placing the signatures, and producing the signed PDF and audit record. We don't read, analyse, sell or share your documents, and we don't use them for any other purpose.
How long uploaded files are kept
These periods apply to the standard server workflow. Browser-only tools do not create a stored server document.
- Documents you upload but don't sign or send: deleted after 7 days.
- Documents sent for signature: kept while the link is open (signing links work for 14 days), then handled as below. If the link expires or the signer declines, the document goes back to your list and is deleted after 7 days unless you send it again.
- Signed documents: the original, the signed PDF and the signatures are deleted 30 days after signing. Download your copy; both sides also receive it by email.
- Revoked documents: deleted 7 days after you revoke the link.
- Deletion is automatic and is recorded in the audit trail.
- Audit records (document name, fingerprints, email addresses, times, IP addresses and browser type of each step) are kept after the files are deleted, so the signing can still be shown later.
What we collect
- Account: your email address, a hashed password, your remaining sends and your purchases.
- Standard signing workflow: the signer's name and email you enter, and for every step the time, IP address and browser type.
- Payments are handled by Stripe. We receive the payment result and a reference, not your card number.
- A cookie keeps you signed in; another lets you come back to a document you uploaded before signing in. We don't use advertising or tracking cookies.
We send only these emails: the signing invitation, a reminder before a link expires, a notice if a link is revoked, declined or expired, the completed document to both sides, and account emails (confirm address, reset password). No marketing email.
Contact
RichScripts Inc, 201 Consumers Rd, North York, ON, M2J 4G8, Canada.