Privacy Policy

When you sign a PDF or a Word document, the file is opened, displayed and written **in your browser**. There is no upload step and no endpoint on our side that accepts a document — so there is nothing for us to store, read or hand over.

The same is true while you are creating a signature: the drawing, the typed text and any photo you upload are processed on your device. Nothing is sent to us unless you press “Save to my account”.

Account details: your name, email address, and — if you sign in with Google — your Google profile picture.

Signatures you explicitly save: the image itself, its name and the date, so it is there on your other devices. You can delete each one, and deleting your account deletes them all.

Account activity: a log of what happened on your account — sign-up, plan changes, checkout attempts, and which page sent you to pricing. We use it to run the service, find faults and see which parts are used. It is deleted after a hundred and eighty days.

Your IP address: we use it to limit how often a few actions can be repeated from the same connection — signing up, asking for a password reset — so the service cannot be flooded. It is held briefly in memory for that count and is not written to our database.

Reminder emails: we may occasionally write to you based on what your account shows — you signed up but have not saved a signature, you started a checkout without finishing it, or your plan ended. Every such email carries an unsubscribe link and one click stops all of them. Account emails — sign-in, password, payment receipts — are not affected, because they answer something you did.

If you subscribe: your customer record at Stripe, including the plan and the state of the subscription. Card details go straight to Stripe and never reach us.

Stripe also notifies us of each payment event, and we keep a copy of those notifications for ninety days so we can investigate a payment that went wrong. They contain what Stripe sends us — your email, name, billing address and the plan — never card numbers.

To run the service you asked for, to keep your saved signature available on your devices, to apply the limits of your plan, to take payment, and to protect the service from misuse.

Google, if you choose to sign in with it. Stripe, for payments. Our hosting provider, which runs the servers the site sits on. Our email provider, for account emails such as verification and password reset. Nobody else, and we do not sell data.

Your documents are not on that list, and that is not an omission: they never leave your device.

Saved signatures are kept until you delete them or close your account. Account and billing records are kept while your account exists and for as long as tax rules require afterwards.

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. Write to bilgesamllc@gmail.com and we will answer within thirty days.

You do not have to wait for us for the first and the last of those: your account page has a button that downloads all of your data and another that deletes your account, and both work immediately.

Bilgesam llc, —. Data questions: bilgesamllc@gmail.com