Privacy Policy

Last updated: 2026-07-29

This Privacy Policy explains what information Sign For Free (“we”, “us”) collects when you use our website and mobile apps, how we use it, and the choices you have. Our design principle is data minimization: we keep as little as the service needs to work.

Information we collect

Account information. When you sign in with Google or Apple we receive your name, email address, and a unique account identifier from the identity provider. We store your profile (email, linked emails, language and timezone preferences, consent records, and settings).
Documents and envelopes. PDFs you upload are processed to run the signing flow and are delivered to participants by email when signing completes. Server-side copies are automatically deleted after the signing flow completes or the envelope expires — we do not keep a long-term archive of your signed documents. Completed documents can be verified later without our servers using the built-in verifier.
Recipient information. Names and email addresses of the people you invite to sign, which we use to deliver signing invitations and completion emails.
Signature assets. In the mobile app, personal stamps and signatures you save are stored on your device in the operating system’s secure storage (iOS Keychain / Android encrypted storage). Signature images attached to a document are processed as part of that envelope and follow the envelope’s deletion lifecycle.
Advertising identifiers (mobile app, free plan only). The app shows rewarded ads through Google AdMob. AdMob may collect device identifiers (such as the advertising ID) and ad-interaction data. On iOS, personalized ads are only enabled if you allow tracking in the App Tracking Transparency prompt; if you decline, ads are non-personalized and rewards work the same.
Optional website analytics and advertising data. If you actively allow the relevant purpose, configured Google, Meta, X, or Reddit technologies may receive a fixed marketing event, the public page type, and their own advertising identifier or an allowlisted campaign parameter. Like any direct browser request, the provider can also receive request metadata such as an IP address, browser or device information, and time. We do not send document contents, filenames, signer or recipient details, signatures, audit trails, account IDs, or form contents to these providers.
Purchases. Paid upgrades are processed by Apple App Store or Google Play. We receive purchase receipts to activate your plan; we never see your payment card details.

How we use information

To provide the signing service: creating envelopes, delivering invitations and completed documents, and verifying access.
To operate your account: authentication, plan entitlements, and settings.
To show ads in the free mobile app and to activate paid plans.
With your consent, to measure website campaigns and, if separately allowed, optimize and show follow-up advertising.
To comply with legal obligations and prevent abuse of the service.

We do not sell your personal information.

Service providers

We rely on a small set of processors to run the service: Google Cloud / Firebase (authentication, database, storage, hosting), an email delivery provider (signing invitations and completion emails), and Google AdMob (mobile ads). When configured and consented, Google, Meta, X, and Reddit may also receive limited website marketing events for measurement or personalized advertising. These providers process data under their applicable business terms and privacy commitments.

Retention

Envelope documents: deleted automatically when the envelope completes or expires.
Account profile: kept until you delete your account.
On-device stamps (mobile app): stay on your device until you remove them or uninstall the app.
Website privacy choices: remembered for 6 months, then requested again.

Your rights and choices

You can delete your account and associated data at any time from Settings → Delete account in the web app or mobile app. Deleting your account erases your envelopes (including in-progress ones, whose signature requests are voided), your profile, and your sign-in account. See How to delete your account for details. Depending on where you live, you may also have rights to access, correct, or port your data — contact us to exercise them.

You can change or withdraw optional website analytics and advertising consent at any time in Privacy choices. Withdrawal stops future optional events but does not affect the lawfulness of processing before withdrawal. You may also object to direct marketing and ask us to help route an access or deletion request to the relevant provider.

Children

Sign For Free is not directed at children and is intended for users old enough to enter into agreements. Do not use the service if you are under 13 (or the equivalent minimum age in your jurisdiction).

International transfers

Our infrastructure and optional advertising providers may process information in countries other than your own. Consent to optional technologies does not itself replace international-transfer safeguards; where required, we use the provider’s applicable data-processing terms and recognized transfer safeguards.

Cookies

The website uses necessary browser storage. Optional analytics and advertising technologies are blocked until you allow the relevant purpose. See the Cookie Policy and Privacy choices.

Changes

We will post any changes to this policy on this page and update the date above. For significant changes we will provide additional notice in the product.

Contact

Questions or requests: [email protected]