Privacy

Last updated 26 September 2026.

If a business sent you a document

They are the controller and we are their processor. We hold, on their behalf: the document, your name and the address or number it was sent to, the time you opened it, the time you agreed to sign electronically, the time you signed, the network address you signed from, and your browser's description of itself.

All of that exists because an electronic signature is only worth something if it can be shown to have been made by the person it names, with their intent, on the document they saw. That is what the law asks for, and it is the whole product. What we do as their processor is set out on our data processing page.

To get a copy or ask for deletion, ask the business you signed with. If you cannot reach them, tell us and we will pass it on. We cannot delete their records on your say-so any more than a filing cabinet can.

If you visited signsealer.com

We are the controller. We hold your email address if you gave us one, when you gave it, whether you confirmed it, and whether you later asked us to stop.

That is the entire list, because this site sets no tracking cookie and runs no analytics — see cookies.

If a business texts you through SignSealer, what we send and what STOP does are on the text messages page.

Text messages and your phone number

Texts come from one toll-free number, only after you or the business you are dealing with asked for them, and only about a document: the link to sign it, at most one reminder, a confirmation, or a one-time code. Message frequency varies with how many documents you are sent. Message and data rates may apply. Reply STOP to any text to stop, and HELP for help.

We will not share or sell your mobile information with third parties for promotional or marketing purposes. Your phone number, and the fact that you consented to receive texts, will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are not shared with any third party. Your number reaches our messaging carrier in order to be delivered, and no further.

Ask for a copy, or ask us to delete it. We will email you to check it is you, and then do it.

Who else sees it

These companies, and no others:

• Supabase — the database, in the United States.
• Railway — runs our servers: the signing pages, the app, and the background worker that sends mail and texts, in the United States. Everything those servers handle passes through it.
• Vercel — serves this website, and passes the signing pages and the app through to our servers over an encrypted connection, so it sees them as they pass.
• Sentry — receives reports of errors in our servers: what went wrong and where in our code. We strip headers, form contents and cookies before a report goes; an error's own message can occasionally include an email address.
• Resend — sends the emails. They see the address, the subject and the message, which contains a document's title and the signing link, never the document's text.
• Telnyx — sends the text messages, when a signer asked for the link by text or a customer signs in by code. They see the phone number and the message: a link, a reminder or a code, never a document's text. Replies of STOP and HELP come back through them.
• Stripe — takes payment from businesses that pay online. Stripe sees the business's name and contact email and holds the card; we never see the card. Nothing about a signer or a document.
• Google and Apple — only if you choose to sign in to the app with them: they learn that you signed in, and we receive your name and email address from them.
• Cloudflare — Turnstile, on our contact form, checks that a message is being sent by a person rather than a script. When it is switched on, Cloudflare sees your browser and your IP address while you are on that page, and tells us only whether the check passed. It never sees what you wrote.

One more, which never sees anything about you: if a business asks us to draft one of its forms, or switches on a review of a form's text before sending it, that text goes to OpenRouter (routing to Anthropic, in the United States). A form is the document with the blanks still blank; your name and what you signed are not in it.

The full list, with what each one is handed, is in our subprocessor list. We do not sell anything to anybody, and we do not use what is here to train anything.

How long

Each business sets a retention period for its executed documents, with a floor of one year and a default of seven; when a document passes it, the text, the signers’ details and the answers are redacted, on a schedule we run every hour. A business can redact the people from a finished document sooner, at a signer’s request. A business that closes its account can take everything it holds in one file, and thirty days after closing, its documents are redacted the same way. Backups roll off on their own schedule, so a deletion reaches them a little later than it reaches the live record.

Two things do not change. The record that a signature happened — the time, the fingerprint of the text, the chain that shows nothing was altered — outlives the account it belongs to, because that is what makes the agreement rely-on-able by you as much as by them. And a certificate stays checkable: if you signed something, you can verify it years later without an account.

Your rights

Depending on where you live, you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, and object to us using it. Use the same form for all of them; it asks for your address so we can check it is you, and nothing else.

We will tell you what we did and, if we kept something, what and why. An erasure that quietly kept something while reporting success is worse than one that says so.

Asking us something

privacy@signsealer.com, or the form.