Legal

Privacy Policy

Last updated: October 2026

The short version: we collect the minimum needed to run an e-signature service — your account, your documents, and the audit trail that proves what happened. We do not sell your data, we run no marketing cookies, and we do not track you across the web.

What we collect

  • Account details: your name, email address, and profile picture from Google when you sign in. We never see or store passwords.
  • Your documents: the PDFs you upload, the fields you place on them, and the final signed copies we generate.
  • Signing activity: who signed what and when, the IP address and browser information recorded at the moment of signing, and the tamper-evident audit trail of every event on a document.
  • Signatures: the signature and initials marks a signer draws, types, or uploads.
  • Billing details: handled by Stripe. We see your plan and payment status — never your card number.

What we collect about signers

If someone sends you a document to sign, we record what the audit trail needs: that you opened the link, what you filled in, when you signed, and your IP address and browser at signing time. You do not need an account, and we do not build a profile on you.

Why we collect it

Only to provide the service: to store your documents, deliver signing links by email, produce signed copies, keep the audit trail that makes signatures verifiable, bill Pro accounts, and keep the service secure. We do not use your documents or data for advertising, and we do not sell personal information to anyone.

Where your data lives

We run on infrastructure providers who store data on our behalf (our sub-processors):

  • Vercel — application hosting
  • Neon — Postgres database
  • Cloudflare R2 — document file storage
  • Resend — transactional email
  • Upstash — rate limiting
  • Google — sign-in (OAuth)
  • Stripe — payments

We choose providers with strong security practices and share with them only what they need to do their job.

Cookies and tracking

We set no marketing cookies and do no cross-site tracking. The only cookie DoneDocs sets is the one that keeps you logged in. There are no analytics trackers following you around the web, and no advertising pixels anywhere in the product.

Retention and deletion

Your documents stay in your account until you delete them. You can delete any document from your dashboard at any time. To erase your account entirely — including your profile and documents — email support@getdonedocs.com and we will do it.

We keep basic records we are legally required to keep (such as billing records) for as long as the law requires, then delete them.

Your rights

Depending on where you live, you may have the right to see, correct, or delete your personal information, or to ask how it is used. Email support@getdonedocs.com with any such request and we will respond.

Changes to this policy

If we change how we handle data — for example, if we add analytics in the future — we will update this page and tell you by email before any significant change takes effect.

Contact

Privacy questions or requests: support@getdonedocs.com.