Privacy policy

Last updated October 2026

Draft for legal review. This text is a starting point and has not been reviewed by a lawyer. It must be reviewed by qualified Indian counsel before launch.

This policy explains what personal data PDF Sign processes, why, and the choices available to you. It is intended to align with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

Data we process

  • Account data: name, work email, organization, hashed password and security settings.
  • Agreement data: documents you upload, recipient names, emails and mobile numbers, field values and signature images.
  • Evidence data: timestamps, IP addresses, browser and device information, verification and consent records.

Why we process it

  • To deliver the service: sending, authenticating, signing and sealing agreements.
  • To create evidence that can be relied on if an agreement is disputed.
  • To keep the service secure and prevent abuse.

Roles

For documents and recipient data, the organization sending the agreement decides what is processed and why. PDF Sign processes that data on its behalf.

Retention

Agreements and their evidence are kept for as long as the sending organization's account and retention settings require. Audit records are not altered or deleted while an agreement is retained.

Your rights

You may request access to, correction of, or erasure of your personal data, subject to legal obligations to retain evidence. Contact the organization that sent you a document, or us.

Contact

Grievance officer and contact details to be added before launch.