Privacy Policy

Last updated 6 October 2026

GetPDFSigned lets people fill in and sign PDFs, and send PDFs to others for signature with a link. This page explains, in plain words, what we keep, why, who else handles it and how to get it deleted.

For anything about your data, write to us through the contact form and we'll reply by email.

The short version

• The free PDF tools work in your browser. Without an account, your PDF never leaves your device.
• If you send a document for signature, we store it so the person signing can open it, and delete it automatically after 14 days on the free plan or a year on Pro.
• When someone opens or signs a document, the sender sees when it happened, from which device and the IP address.
• We don't sell your data, we don't show ads, and we don't use analytics or tracking cookies.
• You can delete any document, or your whole account, yourself at any time.

What we keep, and why

Using the free PDF tools without an account

Rotating, reordering, deleting pages, adding images and filling in or signing a PDF yourself all happen in your browser. The file stays on your device and nothing is uploaded. If you choose to sign in with Google partway through, the open document is put aside in your browser's own storage for up to 30 minutes so it's still there when you come back. It doesn't leave your device either.

If you have an account

• Your email address, and your name and profile picture if you sign in with Google. We use these to sign you in and to show your account.
• Your documents: the PDFs you upload, your drafts (page changes, where fields go, and the text, signatures and images you add for yourself), and the final PDF you send. We keep them so you can pick up your work on any device and so the person signing can open it.
• For each document you send: the name you type as the sender, your optional message and the signer's name if you add one. The signer sees these.
• Your plan and subscription status, which Lemon Squeezy tells us. We never see or store card details.
• When you upload, your IP address and the time, to stop anyone uploading too much at once. We delete these after a day.

If you sign a document

• You don't need an account, and we don't ask for your email.
• When you open and when you sign the document, we record the time, your IP address and your browser and device type. The sender sees these as the document's activity record.
• What you type into text and date fields is stored with the document. Your signature itself is only kept inside the signed PDF.
• The signed PDF, and the fact that you agreed to sign electronically.
• If you report a document, we keep the reason and your IP address so one person can't report it twice. The sender never sees who reported it.

If you write to us

The contact form sends your email address, the topic you pick and your message to our private Discord channel, where we read it and reply to you by email. We keep it there until we've dealt with it, and delete it on request.

How we use it

Only to run GetPDFSigned: to show and deliver documents, to show senders where their documents stand, to keep the service safe from spam and scams (limits, a bot check and the report button), to handle billing, and to answer you when you write to us. We don't sell it, rent it or use it for advertising.

Who else handles it

A few companies run parts of GetPDFSigned for us. Each only gets what it needs for its job, and their own privacy policies apply to what they do.

• Supabase stores the database and files, and handles sign-in.
• Vercel hosts the website.
• Cloudflare Turnstile checks that a real person is sending a document.
• Lemon Squeezy takes payments as the seller of record, so it handles card details, invoices and sales tax.
• Google, only if you choose to sign in with Google.
• An email service sends your sign-in links.
• jsDelivr, a public file server: for some PDFs, your browser fetches extra font or character data from it, which means it sees your IP address like any website you visit.
• Discord: messages from the contact form go to our private channel, and so does an alert when a document is reported (the document's name, its sender's name and account ID and the reason), so we can act on it quickly.

These providers may store data in countries other than yours.

How long we keep it

• Documents on the free plan are deleted 14 days after they're sent, Pro documents after a year. Drafts are kept for the same time after you last change them. Deletion runs automatically every night.
• You can delete any document yourself at any time, from your documents page.
• You can delete your whole account from the account menu. That removes your account, all your documents, signed copies and signing links, and cancels a Pro subscription first so you aren't charged again.
• Upload records (IP address and time) are deleted after a day.
• Lemon Squeezy keeps its own payment records for as long as tax law requires.

Copies can stay in our providers' backups for a short time after deletion before they're overwritten.

Cookies and browser storage

We don't use tracking or advertising cookies, and there are no analytics on this site. Your browser keeps a few things for the app to work: your sign-in session, the sender name you last typed so you don't retype it, and the temporary document stash described above. Cloudflare Turnstile and Lemon Squeezy's checkout may use their own storage to do their jobs.

Your choices and rights

You can see, download and delete your documents yourself, and delete your account at any time. To get a copy of everything we hold about you, or to correct it, use the contact form. If you signed a document someone sent you and want your details removed, ask the sender to delete it, or write to us. Depending on where you live, for example under the GDPR in the EU or the Digital Personal Data Protection Act in India, you may have more rights, and you can complain to your local data protection authority.

Keeping it safe

Everything travels over HTTPS. Files are kept in private storage and only handed out through links that expire after an hour. Signing links are long random codes that can't be guessed, and we only store a scrambled form of them. Every request for your documents is checked against your account on our server.

Children

GetPDFSigned is not meant for anyone under 18, and we don't knowingly keep data about children.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. If a change is significant, we'll say so on the site before it takes effect.