1. About this policy
DocMe Sign (“we,” “us,” or “our”) operates docmesign.com, a platform being developed for business document signing. This policy covers our website, account services, and organization workspaces. Our service supports accounts, organization workspaces, branding, custom-domain requests, PDF document preparation, and typed-name electronic signing. Google Docs import requires a configured Google Picker integration and your separate authorization. Signing links are currently shared manually; automated recipient email delivery is not enabled.
For privacy questions or requests, contact dev-admin@docmesign.com.
2. Information we collect
- Account information: your email address, account identifier, authentication records, and information you provide when contacting us. Password authentication is handled by our authentication provider; passwords are not displayed in the application.
- Google account information: if Google sign-in is enabled and you choose it, we receive the account information authorized for sign-in, such as your name, email address, profile picture, and Google account identifier.
- Workspace information: organization names, your organization memberships and role, requested domain names, and related configuration and status information.
- Document and signing information: PDFs you upload or explicitly choose to import, recipient names and email addresses, field positions and labels, candidate entries such as a signature name, effective date, or place, completed PDFs, and records of signing consent, timestamps, and document integrity hashes. Document access requires an authorized organization role or a verified account matching the invited recipient.
- Technical information: hosting and authentication services may process IP addresses, browser or device information, request timestamps, errors, and security logs to deliver and protect the service.
Basic Google sign-in does not authorize document imports. If you separately connect Google Docs, we request the per-file drive.file permission so you can choose specific Google Docs through Google Picker. We export the selected document to a fixed PDF snapshot for preparation and signing, without changing its Google Docs source. We do not request broad access to your Drive, Gmail messages, or contacts.
3. How we use information
We use information to create and authenticate accounts; display your workspace; manage organization access; process domain requests; prepare documents and recipient-assigned fields; authorize contract access; generate completed PDFs and signing records; respond to support and privacy requests; troubleshoot problems; prevent unauthorized access and abuse; and meet applicable legal obligations. We use Google account information for sign-in and, when separately authorized, selected-file imports. We do not use it for advertising or unrelated profiling.
Depending on the circumstances and applicable law, these activities may be based on providing the service you request, your consent, our legitimate interests in operating and protecting the service, or our legal obligations. Where processing relies on consent, you may withdraw it, subject to any other lawful basis for retaining information.
4. Google user data and Limited Use
Our handling of Google account data follows the Google API Services User Data Policy and its Limited Use requirements. We do not sell Google user data, use it for targeted advertising, or use it to train generalized artificial-intelligence or machine-learning models. We share it only as needed to provide the requested sign-in and selected-file import functionality, protect the service, comply with law, or with your permission.
You can remove DocMe Sign’s access from your Google Account connections. Revoking Google access does not automatically delete information already held in your DocMe Sign account. Contact us to request account deletion.
5. Cookies and session storage
We use essential cookies and related session mechanisms to keep you signed in, maintain authentication sessions, and complete sign-in redirects. These are used for application functionality rather than advertising. You can manage cookies in your browser; blocking or deleting authentication cookies may prevent sign-in or sign you out. The current application does not include advertising trackers or a third-party marketing analytics integration.
6. When information is shared
- Service providers: Supabase provides database, authentication, and storage infrastructure; Railway hosts the application and supporting services. These providers process information needed to operate the service. Google processes information under its own policies when you use Google sign-in.
- Your organization: members authorized to access an organization may see its workspace information and memberships. Organization access is subject to the permissions available in the service.
- Legal and security purposes: we may disclose information where required by law or reasonably necessary to protect rights, investigate abuse, or address security incidents.
- Business changes: information may be transferred in a merger, acquisition, or transfer of the service, subject to applicable privacy obligations and any required notice.
We do not sell personal information or share it for cross-context behavioral advertising.
7. Storage, security, and international processing
Information may be processed in countries where our infrastructure providers operate. Applicable transfer requirements depend on your location and the processing involved. We use measures such as encrypted connections, authentication, and organization access controls to help protect information. No online service or storage system can guarantee complete security.
8. Retention and deletion
We retain information while it is needed to operate your account and workspace, provide support, maintain security, or satisfy applicable legal obligations. Retention varies by the type of information and its purpose. Backups and provider security logs may remain for their applicable retention periods after removal from active systems.
To request account deletion or removal of personal information, email dev-admin@docmesign.com from the address associated with your account. We may verify your identity and clarify the request. Organization information shared with other members may need to remain with that organization; we will explain any applicable limits or required retention.
9. Your privacy choices
Depending on your location, you may have rights to access, correct, export, or delete personal information; restrict or object to certain processing; withdraw consent; or complain to a relevant privacy authority. Contact us to exercise applicable rights. We will respond in accordance with the law that applies to your request.
10. Children and third-party services
DocMe Sign is intended for business users and is not directed to children. If you believe a child has provided information without appropriate authorization, contact us. External services linked from our website have their own privacy policies; this policy does not govern their independent activities.
11. Changes and contact
We may update this policy as the service changes. We will update the date above and provide additional notice when required. When adding document capabilities or requesting new Google permissions, we will describe any additional data handling and request the necessary permissions.
Privacy contact: dev-admin@docmesign.com. Related information: Terms of Service.