Security and privacy

Your account

• Two-factor authentication — a code from an authenticator app (Google Authenticator, 1Password, Authy…), in My account → Security.
• Trusted devices — “Remember this device for 24 hours”, revocable everywhere.
• Sign in — email and password, or Google or Microsoft.

Isolation

Each workspace is strictly isolated: data, settings, API keys and billing. An API key or connector only has access to a single workspace.

Secure links

Signature and portal links use unique tokens: the signature page lasts 30 days from the signature’s last generation (re-sending, redeploying or copying the link again revives it), and the portal link lasts 90 days and can be regenerated on demand.

Retention periods

• Statistics detail: 90 days; daily aggregate: 13 months; monthly archives: 12 months.
• Activity log, AI action history, notifications, schedules, add-in log and scheduled-task records: 90 days.
• AI assistant conversations: 12 months.
• Support requests: 12 months after the last activity.
• Invitations: 14 days. Support access: 72 hours.

Your data

My account → Security lets you Export my data — a JSON file of the active workspace’s data, without images (only their addresses), for the workspace owner only — and Delete my account, along with the workspaces you own. Deletion is immediate, permanent and confirmed by typing your email. Subscriptions are cancelled right away, with no pro-rata refund, and signatures already installed stay.

Audience measurement

The app shows a consent banner for audience measurement (Vercel Analytics and Speed Insights), with Accept or Decline; the choice follows your account, lasts 13 months and can be changed in My account → Security.

Legal documents

The terms of use, privacy policy and list of subprocessors are published on the website.