Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how AuthorizeDoc collects, uses, shares, and protects personal data when you use our website, document creation tools, electronic signature workflows, APIs, integrations, notifications, and related services.

If you use AuthorizeDoc on behalf of an organization, you are responsible for ensuring that the organization has a lawful basis to upload documents, invite recipients, send signature links, and process personal data through the service.

Questions about this policy can be sent to hello@authorizedoc.com.

Data We Collect

We collect account and profile data such as name, email address, password hash, locale, team membership, account settings, subscription status, and communication preferences.

We collect document and signing data that you provide or generate through the service, including document names, uploaded files, templates, generated PDFs, placeholders, custom data, notes, sender and recipient names, email addresses, titles, signatures, signing timestamps, download counts, rejection reasons, security codes, and document status.

We collect audit and technical data such as tracking events, timestamps, IP addresses where available, browser or device information, request metadata, login activity, API activity, webhook delivery activity, integration delivery activity, error logs, and security logs.

We collect billing and commercial data through payment and subscription providers, such as plan, payment status, subscription identifiers, invoices, and transaction metadata. We do not intentionally store full payment card numbers.

We collect support and communication data when you contact us, book an appointment, request help, report abuse, respond to emails, or otherwise communicate with us.

How We Use Data

We use personal data to provide the service, authenticate users, create and manage documents, send signing links and notifications, generate PDFs, process signatures, maintain document tracking, provide downloads, run integrations, support APIs and webhooks, process payments, prevent abuse, troubleshoot issues, improve the service, and comply with legal obligations.

We may use tracking metadata, including IP addresses where available, to support audit trails, account security, fraud prevention, abuse investigation, customer support, and operational reliability. IP addresses are useful technical metadata, but they are not reliable proof of identity or physical location.

Legal Bases

Where GDPR or similar laws apply, we process personal data under one or more legal bases: performance of a contract, legitimate interests, consent, compliance with legal obligations, and, where necessary, protection of rights and security.

Our legitimate interests include operating and securing the service, preventing fraud and abuse, maintaining audit records, improving functionality, supporting customers, and enforcing our agreements.

Cookies and Similar Technologies

AuthorizeDoc uses cookies and similar technologies for essential functions such as sessions, authentication, CSRF protection, language or cookie preferences, and security. We may also use optional cookies or scripts for analytics or product improvement where enabled and permitted.

You can control cookies through your browser and, where available, through our cookie preference tools. Disabling essential cookies may prevent parts of the service from working correctly.

Processors and Third Parties

We may share data with service providers that help us operate AuthorizeDoc, such as hosting and infrastructure providers, email delivery providers, payment processors, analytics or logging providers, storage providers, security tools, and customer support tools.

If you configure an integration, webhook, email delivery, Google Drive delivery, FTP delivery, or similar destination, you authorize us to send the relevant documents, files, metadata, and events to that destination. Third-party services process data under their own terms and privacy practices.

We may disclose data if required by law, to protect rights and security, to investigate misuse, to enforce agreements, or as part of a business transfer such as a merger, acquisition, financing, or sale of assets.

Retention and Deletion

We retain personal data for as long as needed to provide the service, maintain document and signature workflows, preserve audit and security records, comply with legal obligations, resolve disputes, prevent abuse, and maintain business records.

Deleted documents or files may remain temporarily in backups, logs, queues, caches, or generated-file storage before being permanently removed. Some tracking records may be retained longer to preserve an audit trail or protect the integrity of signed-document workflows.

You are responsible for downloading and keeping copies of documents you need before deleting them or closing your account.

Security

We use reasonable technical and organizational measures designed to protect personal data, including access controls, encryption where appropriate, logging, monitoring, and operational safeguards. No internet service can be guaranteed to be completely secure.

You are responsible for protecting your account credentials, API keys, signing links, security codes, integration credentials, and devices.

International Processing

AuthorizeDoc and its service providers may process data in countries other than your own. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a data protection authority.

Authenticated users may use the GDPR/data export tools available in the account. You can also contact us at hello@authorizedoc.com. We may need to verify your identity before fulfilling a request.

Children

AuthorizeDoc is not intended for children. You must have the legal capacity and authority required to use the service and send documents for signature.

Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users, such as updating this page, changing the date above, or sending notice through the service or by email.