Privacy Policy

1. Data We Collect

We collect the following information when you use PactPen:

• Account information: name, email address, hashed password
• Document content: form field values and uploaded PDFs
• Signature data: drawn signature images stored as data URIs
• Audit data: IP addresses, timestamps, and user agents at signing
• Usage data: features used, and daily totals of views per public page and the site that linked to it. Page views are counted without cookies or any identifier and are not linked to you (no third-party analytics)

2. How We Use Your Data

• To provide and improve the Service
• To send transactional emails (signing invites, completed documents)
• To generate Certificates of Completion with audit trail data
• To comply with legal obligations

We do not sell your personal data to third parties.

3. Data Storage

Documents are stored encrypted at rest in our object storage system. Signed PDFs are retained for a minimum of 7 years to meet common legal retention requirements. You may request deletion of your account and associated data by contacting us.

4. Data Sharing

We share data only with:

• Service providers: Cloud storage, email delivery (data processors under contract)
• Legal requirements: When required by law, court order, or regulatory authority

5. Your Rights (GDPR / CCPA)

You have the right to access, correct, or delete your personal data. You may also request data portability or withdraw consent. To exercise these rights, email waqasjaved5211@gmail.com. We will respond within 30 days.

6. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

7. Security

We use industry-standard security practices including TLS encryption in transit, bcrypt password hashing, JWT-based authentication, and document hash verification. We conduct periodic security reviews.

8. Contact

Questions about your privacy? Email waqasjaved5211@gmail.com.