1. Introduction

DottiSign ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

Account information: Name, email address, and profile picture when you sign in via Google OAuth.
Documents: PDF files you upload, signature fields you create, and completed signed documents.
Recipient information: Names and email addresses of people you send documents to for signing.
Payment information: Processed securely by our payment provider (Polar). We do not store your credit card details.

2.2 Information Collected Automatically

Usage data: Pages visited, features used, documents created, and e-signatures sent.
Device information: Browser type, operating system, IP address, and device identifiers.
Audit trail data: Timestamps, IP addresses, and email verification records for each signature event to ensure legal compliance.

3. How We Use Your Information

To provide, maintain, and improve the Service.
To process document signing workflows and deliver signed documents.
To send transactional emails (signing requests, completion notifications).
To generate audit trails for legal validity of e-signatures.
To process payments and manage subscriptions.
To enforce usage limits based on your plan.
To respond to support requests and communicate with you.
To detect and prevent fraud or abuse.

4. Document Storage & Security

Your documents are stored securely using S3-compatible storage with encryption at rest and in transit. We use signed URLs with expiration times to control access to your files. Only you and your designated recipients can access your documents.

We do not read, analyze, or use the content of your documents for any purpose other than providing the Service (e.g., rendering PDFs, baking signature fields into documents).

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

With recipients: When you send a document for signing, recipients receive access to that document and can see your name and email as the sender.
Service providers: We use third-party services for hosting, email delivery, payment processing, and file storage. These providers only access data necessary to perform their services.
Legal requirements: We may disclose information if required by law, court order, or to protect our rights and safety.

6. Cookies & Local Storage

We use browser local storage to maintain your authentication session. We may use essential cookies for security and functionality. We do not use third-party tracking cookies for advertising purposes.

7. Data Retention

We retain your account data for as long as your account is active. Documents and signatures are retained according to your plan and applicable legal requirements. You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data.
Export your data in a portable format.
Withdraw consent for data processing.

To exercise any of these rights, please contact us at the email address below.

9. Children's Privacy

The Service is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

support@dottiesign.com