Privacy policy

Signing your own PDF

When you sign a PDF yourself, the file is opened and signed entirely in your browser. It is never uploaded to us and we never see it.

If you tick “Remember on this device”, your signature image is saved in your browser's local storage on that device only. You can delete it at any time from the signature window or by clearing your browser data.

Sending a PDF to other people

To let other people sign, we have to store the document until they do. We store: your email address and the name you enter; each signer's name and email; the PDF and the values placed in it (text, dates, signature images); and an audit trail of what happened (sent, opened, signed), with the time, IP address and browser of each action.

We use this data only to run the signing process, email the people involved and produce the signature certificate that proves who signed and when. We don't sell it, share it for advertising, or use it for anything else.

Legal basis: providing the service you asked for (GDPR art. 6(1)(b)) and our legitimate interest in keeping a reliable record of the signature (art. 6(1)(f)).

Where your data is kept

Documents and records are stored encrypted with Supabase on servers in Frankfurt, Germany. The website runs on Vercel, with our server code in Frankfurt. Emails are sent through Resend from its EU (Ireland) region.

These providers act as our processors under data processing agreements. Some are US companies; where data may be accessed from outside the EU, they rely on the EU standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep it

Signed documents and their records are deleted 30 days after everyone has signed. Documents that are never completed are deleted 60 days after they were sent. You can delete a document yourself at any time from “My documents”.

Login codes are deleted after one day. Your sender account (your email address) is kept until you ask us to delete it.

Everyone involved receives the signed PDF by email, so copies in people's inboxes are theirs to keep.

Cookies

We use one essential cookie to keep you logged in after you confirm your email. We don't use analytics, advertising or tracking cookies, so there is no cookie banner.

Your rights

You can ask to access, correct, delete or export your data, or object to how we use it, by writing to signfreehelp@gmail.com. We'll reply within one month.

If you think we've mishandled your data, you can complain to the Spanish Data Protection Agency (AEPD, aepd.es).

Changes

If we change this policy we'll update this page and the date at the top.