Privacy Policy

Last updated: November 1, 2026

Who we are

RootSign is operated by Goldman Properties LLC. This policy explains what information we collect when you use RootSign to send or sign documents, and how we handle it.

Information we collect

• From senders: your name and email, and the documents you upload.
• Payments: when you pay to send a document, you enter your card or other payment details directly on Stripe's secure checkout page. We never see or store your full card number. Stripe tells us only whether the payment succeeded, along with a payment reference and the amount.
• Free-send count: to give each sender 2 free sends a month (one a day), we record each free send: the time, plus scrambled one-way codes made from your email address and your IP address (a keyed hash). The codes can't be reversed into your email or IP address; they only let us recognize the same sender again. The IP code is erased after 24 hours, and the whole record once the month is over.
• From signers: your name, email address, IP address, browser/device (user agent), the timestamp you viewed and signed the document, and the signature/initials marks you provide.
• Document content: the PDF you upload or sign, including any information contained in it.
• Usage analytics: we use Cloudflare Web Analytics on our homepage to understand aggregate site traffic (page views, load times). This does not use tracking cookies and does not identify individual visitors, and it does not run on the pages that open a document or a signing link. We also log basic page-view data directly on our own servers (page visited, referring website, and campaign tags if present) to understand traffic patterns. This first-party logging doesn't use cookies or any tracking script, and never records the contents of your documents or the private links used to access them.

How we use this information

To operate the e-signature workflow: generating signing links, recording who signed what and when, producing the audit trail and Certificate of Completion attached to signed documents, and delivering documents by email to senders and signers, counting free sends, and taking payment for sending. We do not sell your information, show ads, or send you marketing emails, and we never will. The small per-document fee is how RootSign pays for itself instead. The only promotion in any email is one line at the end of the email that delivers the signed PDF to signers, inviting them to try RootSign.

How long we keep it

Once the completed PDF has been emailed to the sender and every signer, we automatically and permanently delete the document and everything associated with it at our next cleanup run. If a document is never completed (or delivery fails), the same deletion happens 7 days after upload. Deleted data includes — the original PDF, the completed/signed PDF, and all signer records (names, email addresses, IP addresses, browser/device information, and viewing and signing timestamps), the full audit trail, and our record of the payment for that document. Once deleted, the data is gone and cannot be recovered by us or by you. The free-send count described above is kept separately, holds no document or readable personal information, and is erased once the month is over.

Because of this, the completed PDF is delivered to you only by email, and you should save your own copy — after the retention window we no longer have it. The only exception is email: copies of the messages we send may persist in your and the recipients' own mailboxes and with our email provider, outside our control. Likewise, Stripe keeps its own record of each payment (such as the amount, date, and the email entered at checkout) as required by financial and tax regulations, under Stripe's privacy policy.

Separately from this active-storage deletion, our hosting provider (Render) takes daily infrastructure snapshots of the storage disk for disaster-recovery purposes, and each snapshot is retained for 7 days after it is captured. As a result, a small residual copy of deleted data can persist in these infrastructure backups for up to an additional 7 days beyond the deletion window described above, after which it is also purged. These backups exist solely for infrastructure recovery, are not accessible through the application, and are not used for any purpose other than disaster recovery.

Third parties we use

We rely on a small number of service providers to run RootSign. They process data on our behalf and are bound by their own privacy and security practices:

• Stripe (Stripe, Inc.) — processes payments for sending documents. Card details go directly to Stripe and never pass through our servers.
• Resend (Resend, Inc.) — delivers the transactional emails that carry signing links and completed documents.
• Cloudflare, Inc. — privacy-friendly website analytics, plus DNS and content-delivery/network infrastructure for the site.
• Render (Render Services, Inc.) — cloud hosting that runs the RootSign application and stores documents while they are retained.

Aside from these providers, we do not share your documents or personal information with any other third party.

Your rights

You can request access to, or deletion of, your information by emailing privacy@rootsign.io. We will respond within a reasonable time. Note that because document data is automatically deleted once delivered (and no later than 7 days after a document is created), older information no longer exists to be accessed or deleted. If you're in a jurisdiction with specific data rights (e.g. California, the EU, or Colorado), we will honor applicable requests under those laws.

Children's privacy

RootSign is not directed at children under 13, and we do not knowingly collect information from them.

Security

We take reasonable measures to protect your information, but no online service can guarantee absolute security.

Changes

We may update this policy as the product evolves. Material changes will be reflected here with an updated date.

Contact

Questions about this policy? Email privacy@rootsign.io.