Privacy Policy
Last updated: October 20, 2026
Easy Sign (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our electronic signature service.
- 01
Information We Collect
We collect information necessary to provide our electronic signature service. We minimize data collection to what is essential for service operation.
- Account Information: Email address and display name when you create an account.
- Document Content: PDFs and documents you upload for signature processing.
- Signature Data: Electronic signatures, initials, and form field values you provide.
- Usage Data: IP addresses, browser type, and timestamps for security and audit purposes.
- Communication Data: Messages you send through our support channels.
- 02
How We Use Your Information
We use your information solely to provide, maintain, and improve our electronic signature service.
- To process and deliver documents for electronic signature.
- To authenticate users and protect against unauthorized access.
- To generate audit trails and signature certificates.
- To send service-related notifications (signature requests, completions).
- To respond to support inquiries and resolve issues.
- To comply with legal obligations when required.
- 03
Information Sharing
We do not sell, rent, or trade your personal information. We only share data in limited circumstances.
- With recipients you designate to sign or view documents.
- With service providers who assist in operating our platform (hosting, email delivery, error and performance monitoring, payment processing).
- When required by law, court order, or government request.
- To protect our rights, privacy, safety, or property.
- In connection with a merger, acquisition, or sale of assets (with notice to you).
- 04
Data Retention
We retain your data only as long as necessary to provide our service. Retention periods differ between registered accounts and guest (no-signup) use.
- Free registered accounts: each document is removed from your account 30 days after its creation date and moved to Trash, where it can be restored for a further 30 days before being permanently erased. A warning email is sent 7 days before removal.
- Pro accounts (including active trials): documents are retained for as long as your subscription remains active.
- Former Pro accounts: once a Pro subscription ends, documents are kept for 60 days after the subscription end date, then moved to Trash and erased 30 days later.
- Guest use (no signup): documents and signatures are automatically deleted 7 days after creation.
- Documents pending signature are removed at the end of the applicable retention period, regardless of completion state.
- Account information is retained while your account is active.
- Audit logs may be retained longer for legal compliance purposes.
- You should download completed documents before the retention period expires.
- Data cannot be recovered once it has been erased from Trash.
- 05
Data Security
We implement appropriate technical and organizational measures to protect your information.
- All data is transmitted using TLS/SSL encryption.
- Documents are stored securely with access controls.
- We use secure authentication and session management.
- Access to personal data is limited to authorized personnel.
- We regularly review and update our security practices.
- 06
Access Control and Authentication
Recipient links and API clients must authenticate with valid access tokens before interacting with any envelope data.
- Envelope owners manage who can view, sign, or download documents through access-token protected links.
- Tokens automatically expire based on issuer configuration; revoked tokens cannot be reactivated.
- Service-role operations are limited to server-side workflows scoped to the envelope owner of record.
- 07
Your Rights
You have rights regarding your personal information. We respect and support these rights.
- Access: You can request a copy of your personal data.
- Correction: You can update inaccurate information in your account.
- Deletion: You can request deletion of your account and associated data.
- Withdrawal: You can withdraw consent for electronic communications.
- To exercise these rights, write to our Privacy Officer through the contact form on our support page (easy-sign.ca/contact-support) and start your message with "Privacy request".
- 08
Cookies and Tracking
We use essential cookies to operate our service. We do not use tracking cookies for advertising.
- Authentication cookies to maintain your login session.
- Security cookies to protect against unauthorized access.
- We do not use third-party advertising or tracking cookies.
- We do not sell your data to advertisers or data brokers.
- Analytics are used only to improve service performance.
- 09
Third-Party Services
We use trusted third-party services to operate our platform. These providers are bound by confidentiality agreements.
- Supabase: Database and authentication services.
- Vercel: Web hosting and content delivery.
- Resend: Email delivery, including signature notifications and completion emails with signed documents and audit certificates attached.
- Stripe: Payment processing for premium features.
- Sentry: error and performance monitoring. Performance data is collected for a sample of page loads and server requests. When an error occurs in your browser, Sentry may also receive a replay of that browser session: roughly the minute before the error, plus the rest of the session after it (until 15 minutes of inactivity, and no more than 60 minutes in total). In the replay, on-screen text and form inputs are masked, images and document previews are blocked, and network requests are recorded as metadata only (such as address, status, timing and size), never their request or response bodies.
- 10
User Responsibilities
Senders and recipients must audit their documents and signature placements prior to finalizing any envelope.
- Verify that uploaded PDFs do not contain regulated personal data beyond what is necessary for signing.
- Confirm that signer order, required fields, and reminders align with your organization's policies.
- Download completed agreements immediately after execution to maintain your own archives.
- 11
Service Scope and Liability
Easy Sign is an electronic signature workspace offered without service level guarantees, uptime commitments, or archival backups.
- We do not assume liability for lost, corrupted, or misrouted files, signatures, or metadata.
- We provide no implied warranties of merchantability, fitness for a particular purpose, or legal enforceability of signed documents.
- External validation of agreements and compliance with local regulations remain the user's responsibility.
- 12
International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place.
- Documents and database records are stored in Canada (AWS Canada Central region, Montréal).
- Some processing — web hosting, email delivery (including emailed signed documents), error and performance monitoring (Sentry, US data region), and payment processing (Stripe) — is performed by service providers in the United States, where data may be subject to lawful access requests by local authorities.
- We use service providers with appropriate data protection certifications and contractual safeguards providing a comparable level of protection.
- By using our service, you consent to data processing in these locations.
- 13
Children's Privacy
Easy Sign is not intended for children under 18 years of age.
- We do not knowingly collect information from children.
- If we learn we have collected data from a child, we will delete it promptly.
- Parents who believe their child has provided information should contact us.
- 14
Canadian Privacy Compliance (PIPEDA)
Easy Sign is operated by a Canadian company. We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).
- We collect, use, and disclose personal information only for the purposes described in this policy, with your consent.
- We limit collection to what is necessary to provide the service, and retain it only as long as needed (see Section 4).
- We remain accountable for personal information transferred to third-party processors (see Sections 9 and 12).
- Our Privacy Officer is accountable for our compliance with this policy. You may challenge our compliance or request access, correction, or deletion through the contact form on our website (easy-sign.ca/contact-support); start your message with "Privacy request".
- If unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
- 15
Public Signing Links
An organization that uses Easy Sign can share a public link to one of its forms. People who sign through that link do not need an Easy Sign account.
- We collect the first name, last name and email address the signer enters, the signature they draw and anything they type into the form, their IP address, device and browser information, time zone, and the record of their consent to sign electronically.
- That information and the signed document go to the organization that owns the link: in its Easy Sign account, in the list it can export as CSV, and by email.
- For this information we act on behalf of that organization, which is responsible for its form and for how it uses the information. We also keep, for our own purposes, what we need for security, abuse prevention and document verification, as described below.
- We keep a verification record of each signed document permanently, so that anyone holding the document can confirm it is authentic. It includes the document’s title, which can contain the signer’s name, and a fingerprint (hash) of the document.
- Questions and access requests can go to that organization, or to us through the contact form on our support page (easy-sign.ca/contact-support).
- Sessions that are started but never signed are deleted automatically by our daily cleanup once they are more than 6 hours old.
No Archival Guarantee
Easy Sign does not offer archival storage, legal retention guarantees, or recovery of materials beyond the retention periods described in Section 4. By continuing to use Easy Sign, you acknowledge that you must download and maintain your own copies of any files, signatures, and audit history that matter to your records.
If you have questions about this Privacy Policy, please contact us through our support page.