Privacy Policy
Last updated: October 20, 2026
CelerityLabs LLC ("Company," "we," "us," or "our") operates the SignPDF service located at signpdf.app ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service. By using the Service, you consent to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide
- Account information: When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your name, email address, and profile picture from Google.
- Documents: PDF files you upload to the Service for signing.
- Signatures: Electronic signature images you create or upload through the Service.
- Payment information: When you subscribe to the Pro Plan, payment details (credit card number, billing address) are collected and processed directly by Stripe. We do not store your full payment card details on our servers. We receive and store only limited information from Stripe, such as the last four digits of your card, card type, and billing status.
- Communications: Any information you provide when you contact us for support or feedback.
1.2 Information Collected Automatically
- Usage data: Pages visited, features used, time and date of access, and interaction patterns.
- Device information: Browser type, operating system, device type, and screen resolution.
- IP address: Collected for security purposes, fraud prevention, and audit trail functionality.
- Cookies and session data: We use essential cookies to maintain your session and authentication state. We do not use third-party tracking or advertising cookies.
1.3 Information from Third Parties
- Google OAuth: If you authenticate via Google, we receive your name, email, and profile picture as authorized by you.
- Stripe: We receive transaction confirmations, subscription status, and limited billing information from Stripe.
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis |
|---|
| Provide, operate, and maintain the Service | Performance of contract |
| Process your document signatures | Performance of contract |
| Process payments and manage subscriptions | Performance of contract |
| Send transactional emails (OTP codes, signing requests) | Performance of contract |
| Generate audit trails for Pro users | Performance of contract |
| Prevent fraud and ensure security | Legitimate interest |
| Respond to support requests | Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Improve the Service and fix issues | Legitimate interest |
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We share your information only in the following circumstances:
- Service providers: We share limited data with trusted third-party providers who help us operate the Service:
- Stripe — for payment processing. Subject to Stripe's Privacy Policy.
- Email service provider — for sending transactional emails (OTP codes, signing invitations). We share only the recipient email address and message content.
- Hosting provider — for infrastructure and data storage.
- Send-to-sign recipients: When you use the send-to-sign feature, the recipient will see your name and the document title. The recipient will have access to view and sign the document through a secure, unique link.
- Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
4. Data Retention
- Documents: Your uploaded and signed documents are retained as long as your account is active or until you delete them. You may delete documents at any time from your dashboard.
- Account information: Retained as long as your account exists. You may request deletion of your account by contacting us.
- Audit trail data: Retained as long as the associated document exists, to maintain the integrity of the signing record.
- Payment records: Retained as required by applicable tax and accounting laws.
- OTP codes: Automatically expire and are invalidated after 10 minutes.
5. Data Security
We implement reasonable technical and organizational security measures to protect your information, including:
- Documents are stored in private server storage, not publicly accessible.
- All data is transmitted over encrypted HTTPS connections.
- Passwords are hashed using industry-standard algorithms.
- Access to systems is restricted to authorized personnel only.
Despite these measures, no system is completely secure. We cannot guarantee absolute security of your data and are not responsible for breaches resulting from circumstances beyond our reasonable control.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Data portability: Request your data in a structured, commonly used format.
- Objection: Object to processing based on legitimate interest.
- Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a verifiable request.
7. Cookies
We use only essential cookies necessary for the operation of the Service:
- Session cookie: Maintains your login state and session data. Expires when you close your browser or after the session timeout period.
- CSRF token cookie: Protects against cross-site request forgery attacks.
We do not use analytics, advertising, or tracking cookies. We do not participate in any ad networks or cross-site tracking.
8. International Data Transfers
Our Service is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.
9. Children's Privacy
The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us at [email protected].
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, and disclose.
- The right to request deletion of your personal information.
- The right to opt out of the sale of personal information. We do not sell personal information.
- The right to non-discrimination for exercising your privacy rights.
To exercise these rights, contact us at [email protected].
11. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 6 above. Our legal bases for processing are described in Section 2. If you have concerns about our data processing, you have the right to lodge a complaint with your local data protection authority.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: