Privacy Policy

Generating a transparent signature and signing a PDF or image both run entirely in your browser. Your files are not uploaded to us for that processing. We only store data when you choose to create an account and save something — for example, a signature in your Vault.

We keep collection to the minimum needed to run the service:

• Account data — if you sign up, your email address and basic profile details from your chosen sign-in provider.
• Saved content — signatures you explicitly save to your Vault, and document history if you opt in.
• Billing data — handled by our payment processor (Paddle). We receive your plan status and receipts, not your full card number.
• Usage and diagnostics — page views, feature usage, and errors, collected via our analytics provider to keep the product fast and reliable. If you're signed in, these are linked to your account ID and email so we can connect them to support requests.
• Session activity — unless you turn it off, our analytics provider records how you interact with the page (clicks, taps, scrolling, and on-screen content) to help us diagnose bugs and improve the product. Signatures, document previews, and file names are excluded from recording, and everything you type into form fields is masked.

Guest uploads are ephemeral. When you use PureSign without an account, your signature images and documents are processed locally and discarded — they are never persisted on our infrastructure. We don't sell your data, and we don't use your documents to train models.

Background removal, transparent PNG export, and overlay-based PDF and image signing are performed client-side using in-browser processing. Your original file content stays on your device for these operations. PDF signing is non-destructive: text layers, bookmarks, metadata, and embedded fonts are preserved rather than rasterized.

We use a small number of essential cookies to keep you signed in and to remember preferences such as your theme. For product analytics and session replay, we use PostHog(US region). Analytics and session replay are on by default; you can turn them off at any time from the cookie banner or the “Cookie preferences” link in our footer, and that choice also stops analytics events our servers would otherwise send about your activity. Essential cookies can't be turned off, since the service can't work without them. Every tool works the same whether analytics is on or off. Free accounts may see ads, which can set their own cookies. Full detail lives in our Cookie Policy.

• Guest uploads — deleted immediately after processing.
• Saved signatures and history — kept until you delete them or close your account.
• Account records — removed within 30 days of account deletion, except where we must retain billing records for legal or tax reasons.
• Analytics events — kept by PostHog for up to 1 year, then deleted.
• Session recordings — kept by PostHog for up to 30 days, then deleted.

You can access, export, or delete your saved signatures and documents at any time from your dashboard. You may close your account, which removes your stored content. Depending on where you live, you may also have rights under the GDPR, UK GDPR, or CCPA — including access, correction, deletion, and portability. To exercise any of these, email us and we'll help.

We rely on a handful of trusted vendors to operate PureSign — including hosting, database, payment infrastructure, and PostHog for product analytics and session replay (US region), which you can turn off at any time. They process data only on our behalf and under contract. We do not authorize them to use your data for their own purposes.

PureSign is not directed at children under 13 (or the minimum age in your jurisdiction). We don't knowingly collect data from them. If you believe a child has provided us data, contact us and we'll remove it.

If we make material changes, we'll update the effective date above and, where appropriate, notify you in-app or by email. Continued use after an update means you accept the revised policy.