Privacy Policy

Account information. We receive the authenticated user identifier, name, and email address supplied through ChatGPT sign-in so that we can control workspace access and keep each user’s records separate.

Documents and signing information. We store files uploaded by users, template-field placement, recipient names and email addresses, signing responses, signatures or initials, delivery status, and completed PDFs.

Security and audit information. For completed signing requests, we may record verification events, signing time, the signer’s IP address and IP version, and a cryptographic file hash in the sender’s private audit trail.

Connected email information. If a user connects Gmail or Microsoft, we receive the email address, account identifier, granted permission scope, and OAuth credentials needed to send document-related email. Tokens are encrypted and stored separately for the connecting user.

We use information to provide document storage, file conversion, reusable PDF templates, secure signing links, email verification, delivery of signing invitations and completed documents, private audit records, account support, security monitoring, and service improvement.

We do not sell personal information or use document content or Google user data for advertising.

Document Studio’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Document Studio requests the Gmail gmail.send permission solely to send document-signing invitations, verification messages, and completed document copies from the connected user’s account. Document Studio does not request or use permission to read, modify, download, or delete Gmail messages.

Google user data is not transferred to advertising platforms, data brokers, or other users. Human access is limited to what is necessary for security, support requested by the user, legal compliance, or operation of the service.

Information may be processed by infrastructure, authentication, storage, email-delivery, and security providers that support Document Studio. These providers receive only the information necessary to perform their services. We may also disclose information when required by law, to protect users or the service, or as part of a lawful business transfer.

A sender controls the documents and recipient information placed in that sender’s workspace. A signing recipient receives the document that was intentionally sent to them and may receive a completed copy.

Documents, signing requests, and connected email credentials are associated with the authenticated owner account. Document Studio is designed to prevent one user from accessing another user’s documents or email connection.

Free accounts are subject to storage and activity limits shown in the product. Records are retained while needed to provide the service or until the user deletes them, subject to security, evidentiary, and legal retention needs.

Users may disconnect or change a connected Gmail or Microsoft account at any time from Document Studio Settings. Disconnecting stops future email access through that connection. Users may also revoke Google access through their Google Account security settings.

Settings also provides an account-data export and permanent account deletion. Deletion removes stored documents, templates, signing records, certificates, and connected email credentials and cannot be undone. The owner account is protected from self-service deletion.

We use access controls, encrypted OAuth-token storage, per-user ownership checks, private audit trails, expiring signing links, email verification, and other safeguards appropriate to the service. No storage or transmission system can guarantee absolute security.

Document Studio is a business document service and is not directed to children under 13. We may update this Policy as the service or legal requirements change. The current effective date will appear at the top of this page.

Questions or privacy requests may be sent to sanfordhms@gmail.com.