The short version
- We cannot read your documents, signatures, field values or saved access codes. They are encrypted on your device with keys we never receive.
- We do collect the information needed to run the Service: account details, sign-in records, envelope details such as signer names and email addresses, and security logs.
- We do not sell personal information, share it for targeted advertising, or use advertising cookies. Our public website uses Google Analytics cookies only if you allow them, and never inside the app or on documents.
- You can ask to access, correct, delete or get a copy of your personal information by emailing privacy@edocyousign.com.
1. Who we are and what this policy covers
This Privacy Policy explains how Bell LLC ("eDocYouSign," "we," "us") collects, uses and shares personal information when you visit our website, use the eDocYouSign application, or open a document sent to you for signature (together, the "Service"). Our address is [MAILING ADDRESS].
Our two roles. For account holders, workspaces and our website, we decide how personal information is used. For the documents and signer information that a customer sends through the Service, we act as a service provider (sometimes called a "processor") to that customer, who decides how it is used. If you received a document to sign, the sender is responsible for its own privacy practices, and you may want to contact them directly about your information.
2. What we cannot see
Documents are encrypted in the sender's browser with a unique 256-bit key before upload. Field values, signatures and attachments are encrypted in the signer's browser. Each document key is protected by an access code that we never receive in readable form, and saved access codes in a code vault are encrypted with a passphrase only the vault owner knows. As a result, we cannot read document content, and we cannot provide it to anyone, including in response to legal process, beyond the encrypted form we store.
We can see the information needed to deliver documents and keep records, such as document titles, the names and email addresses of senders and signers, the status of each envelope, and the audit trail of when it was sent, viewed and signed.
3. Information we collect
Information you give us
- Account information: name, email address, password (stored only as an Argon2id or bcrypt hash), workspace name and role.
- Two-step sign-in: the secret for your authenticator app (stored encrypted) and one-time recovery codes (stored only as hashes).
- Envelope details: document title, message, and the names and email addresses of signers you add.
- Support and communications: what you send us when you contact us.
- Billing: for paid plans, billing contact details, billing address and tax ID, and a record of payments (amount, date, status, card brand and last four digits). Card details go directly to our payment provider, Stripe, Inc.; we never receive or store full card numbers. Stripe's own privacy policy applies to the information you give it at checkout.
- Support communications: messages you send in support requests and live chat, chat transcripts and ratings, and records of any support access to your workspace that you allow.
- Contact form and website chat: if you contact us from our website, your name, email address, company (if given), topic and message, the IP address you sent it from, and the one-time code we email you to confirm your address (stored only as a keyed hash and deleted after a day). We use this to answer you, to prevent spam and abuse, and, for sales enquiries, to follow up about your request. We don't use third-party CAPTCHAs or tracking for spam protection: your browser solves a short calculation instead.
- Voice calls with support: calls happen only when a support agent turns them on in a chat and you choose to call. Audio travels directly between your browser and the agent's (or through our relay server if one is needed), encrypted with WebRTC. We don't record calls; we keep only the time a call started and how long it lasted.
Information from Google or Apple
If you choose "Continue with Google" or "Continue with Apple," we receive your name, email address, whether the provider has verified it, and an account identifier. If you use Apple's Hide My Email, we receive an Apple relay address instead of your personal address. We do not receive your Google or Apple password, contacts or other data.
Information collected automatically
- Security and audit logs: IP address, browser type, sign-in times, failed sign-in attempts, and actions such as sending, viewing, signing or changing access to a document.
- Cookies: one essential session cookie that keeps you signed in, and, on our public website only if you allow them, Google Analytics cookies. See section 7.
Encrypted content
Documents, field values, signatures, attachments and code-vault records, which we store only in encrypted form (see section 2).
4. How we use information
- to provide the Service, including creating accounts, delivering documents and emails, and producing audit trails and certificates of completion;
- to authenticate users and keep the Service secure, including preventing fraud, enforcing rate limits and investigating misuse;
- to send service messages, such as sign-in alerts, signing requests, reminders, and notices about changes to our terms;
- to provide support and respond to requests;
- to bill for paid plans and meet tax and accounting obligations;
- to maintain and improve the Service, using service and log data (never document content, which we cannot read); and
- to comply with law, enforce our Terms of Service and protect rights and safety.
We do not use personal information for targeted advertising, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
5. How we share information
We do not sell personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We disclose personal information only as follows:
- Within a document: signers see the sender's name, email and company, and the names of other signers. The sender sees each signer's status and audit trail, including IP addresses and times.
- Within a workspace: owners and administrators can see members, envelopes sent from the workspace, and the workspace audit log.
- Service providers that help us run the Service under contracts that limit their use of the information, such as our hosting provider (GoDaddy), our document and backup storage provider (Backblaze, which stores only encrypted files), email delivery provider, identity providers (Google, Apple and, if used, Auth0), payment provider (Stripe) and, for visitors who allow it, our website analytics provider (Google Analytics).
- Legal requirements: when we believe in good faith that disclosure is required by law, subpoena or court order, or is needed to protect the rights, property or safety of our users, the public or us. Encrypted content remains encrypted.
- Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy.
- With your direction or consent.
6. Categories of personal information (California notice at collection)
In the last 12 months we have collected the following categories of personal information, as defined in the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"). We have not sold or shared any of them.
| Category | Examples | Sources | Purposes | Disclosed for a business purpose to |
|---|---|---|---|---|
| Identifiers | Name, email address, account ID, IP address, Google or Apple account identifier | You; your workspace; senders who invite you to sign; Google or Apple if you sign in with them; your device | Providing and securing the Service; communicating with you | Hosting, email delivery and identity providers; workspace owners and administrators; senders and co-signers of a document |
| Customer records (Cal. Civ. Code § 1798.80) | Name, email address, company name and, for paid plans, billing contact details | You; your workspace; our payment provider | Accounts, billing and support | Hosting and payment providers |
| Commercial information | Plan, subscription and billing history | You; our payment provider | Billing, tax and accounting | Payment provider; professional advisers |
| Internet or other electronic network activity | Sign-in times, pages used, browser type, envelope views and signing events, failed sign-in attempts | Your device and browser | Security, fraud prevention, audit trails and troubleshooting | Hosting provider; workspace owners and administrators (audit log); the sender of a document (that document's audit trail) |
| Geolocation data | Approximate location inferred from IP address (no precise GPS location) | Your device | Security and audit trails | Same as above |
| Professional or employment information | Job title or company, if you provide it | You; your workspace | Account administration | Workspace owners and administrators |
| Sensitive personal information | Account sign-in credentials (password stored only as a one-way hash; authenticator secret stored encrypted) | You | Only to authenticate you and secure your account | Not disclosed |
| Encrypted content | Documents, field values, signatures, attachments and code-vault records, stored only in encrypted form we cannot read | You; your signers | Storing and delivering documents | Hosting provider (encrypted form only) |
We use sensitive personal information only for purposes allowed by the CCPA, such as authenticating you and securing your account, so the right to limit its use does not apply.
7. Cookies and similar technologies
The application uses one strictly necessary cookie to keep you signed in. It is limited to our site, marked secure and inaccessible to scripts, and it expires when you sign out or after a short period of inactivity. We do not use advertising or social-media tracking cookies or pixels.
Google Analytics (website only, with your permission). On our public website pages (not in the app, not on signing pages and never on documents), we ask before using Google Analytics. If you choose Allow, Google Analytics sets cookies (named _ga) to count visits and see which pages are useful, and Google receives your browser's details and an approximate location; Google Analytics does not log or store IP addresses. We turn off Google's advertising features and signals. If you choose No thanks, or your browser sends Do Not Track or Global Privacy Control, Google Analytics is not loaded at all. Your choice is remembered in your browser. You can change it any time: Cookie settings.
Visit counts. To understand how many people visit our website, it counts visits without cookies or any stored identifier. Each visit is counted using a one-way, keyed hash of your network address and browser type that changes every day, so a visit can't be linked to you or to your visits on other days, and the address itself is never stored. We keep only the day, the number of pages viewed, whether the visit lasted more than a few seconds, the first page and the referring website's name, for up to 400 days. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
Our website loads fonts from Google Fonts, which means your browser sends your IP address to Google when you visit. Google's use of that information is governed by Google's privacy policy.
Do Not Track and Global Privacy Control. Because we do not track you across sites or sell or share personal information, there is nothing to opt out of. We nonetheless treat a Global Privacy Control signal as a valid request to opt out of sale and sharing.
8. How long we keep information
- Accounts: while your account is active. When you close it, we delete or de-identify your account information within 30 days, except as described below.
- Documents and audit trails: as long as the customer that sent them keeps them, or until the customer deletes them or closes the workspace. Audit trails are kept with their document so it remains verifiable.
- Workspace audit and security logs: generally up to 7 years, to support customers' record-keeping and legal obligations, unless a shorter period is agreed.
- Failed sign-in records: about 24 hours.
- Backups: deleted information may remain in encrypted backups for up to 30 days before it is overwritten.
We may keep information longer when required by law or to resolve disputes and enforce our agreements.
9. How we protect information
We protect personal information with measures that include end-to-end encryption of document content, required two-step sign-in for every account, encrypted HTTPS connections, encryption of authenticator secrets at rest, account lockouts after repeated failed attempts, short session timeouts, strict browser security policies and a tamper-evident audit log. Access to our systems is limited to people who need it.
No method of transmission or storage is completely secure. If a security breach affects your personal information, we will notify you and regulators as required by applicable state and federal law.
10. Your privacy rights
Depending on where you live, including California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with consumer privacy laws, you may have the right to:
- Know and access the personal information we have about you and how we use it;
- Correct inaccurate personal information;
- Delete personal information, subject to legal exceptions;
- Get a copy of your personal information in a portable format;
- Opt out of the sale or sharing of personal information, targeted advertising and certain profiling (we do none of these); and
- Not be discriminated against for exercising your rights.
We offer these rights to all users, whether or not a state law requires it.
How to make a request
Email privacy@edocyousign.com from the address on your account, or write to us at [MAILING ADDRESS]. You can also view and update much of your information yourself in the application. We will verify your request by confirming control of your account email, and we will respond within 45 days (we may extend this by another 45 days where the law allows, and will tell you if we do). You may use an authorized agent, who must provide written permission from you; we may still ask you to verify your identity.
Documents sent by others. If your information is in a document a customer sent you, we will refer your request to that customer, because they control that information, and we will help them respond.
Appeals. If we decline your request, you may appeal by replying to our decision or emailing privacy@edocyousign.com with the subject "Privacy appeal." We will respond within the time the law requires. If you are not satisfied, you may contact your state attorney general.
California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes (Cal. Civ. Code § 1798.83).
Nevada. We do not sell covered information as defined in Nevada law.
11. Children
The Service is for business use by adults and is not directed to children. We do not knowingly collect personal information from children under 13, as defined in the Children's Online Privacy Protection Act, or from anyone under 16 for sale or sharing. If you believe a child has given us personal information, contact us and we will delete it.
12. Emails we send
We send transactional emails needed to run the Service, such as signing requests, sign-in alerts and account notices. You cannot opt out of these while you have an account, because they are part of the Service. If we send marketing emails, they will follow the CAN-SPAM Act and include a way to unsubscribe. Signing request emails come from us on behalf of the sender, and they never contain the document's access code.
13. Text messages (SMS)
eDocYouSign sends text messages only as an optional identity check for document signing. A sender can ask that a signer confirm a one-time code before opening a document. We text the code only when the signer asks for it by choosing Text me a code on the signing page, next to a notice explaining the program. Message and data rates may apply. Reply STOP to opt out or HELP for help. See the SMS terms for full details.
- What we keep: the mobile number the sender entered (kept with the envelope, shown masked to signers), the time each code was sent and whether it was delivered. We never store the text of the message, because it contains the code.
- Opt-outs: if you reply STOP, we keep a one-way, keyed fingerprint of your number so we never text it again, until you reply START.
- Who processes it: our messaging provider, Twilio Inc., delivers the texts on our behalf, and wireless carriers carry them.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers (such as Twilio) that deliver the messages for us, or where the law requires it. We never sell phone numbers.
- We do not send marketing texts.
14. Where information is processed
We are based in the United States, and we store and process information in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
15. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email or in the Service before they take effect.
16. Contact us
Bell LLC
Attn: Privacy
[MAILING ADDRESS]
Email: privacy@edocyousign.com
This document is provided for general information about how eDocYouSign works and the terms that apply to it. It is not legal advice to you. If you have questions about your own legal obligations, consult your attorney.