Privacy policy

When you sign in. Google is the only way in, so we never see or store a password. Google gives us your name, email address, whether it has verified that address, your profile picture and a Google account id. We keep those so your documents are still yours on the next visit.

Documents you upload. The PDF itself, the name you give it, and the position of every field you place on it.

People you send to. The name and email you enter for each signer. When one of them opens the document we also record their IP address, their browser's user agent string and the time.

Signatures. Either the typed name and the font it was drawn in, or the image of a hand-drawn one. A signer can ask us to remember theirs, in which case we store it against a hash of their email address so the next document arrives prefilled.

Billing. Dodo Payments runs the checkout and holds the card. We store your plan, your subscription status and the renewal date. Card numbers never reach us.

Email delivery records. Which message went to which address, and whether the provider accepted it. Kept for 90 days, which is long enough to answer a signer who says the link never arrived.

Every document carries a chain of events: created, sent, viewed, signed, completed. Each entry holds the actor's email address, IP address, user agent and timestamp, and is hashed together with the entry before it, so removing or editing one entry breaks the chain and the public verification page reports it as broken.

Audit entries cannot be edited, hidden or deleted on their own while the document exists, because a record anyone could quietly correct would not be worth showing to a court. The way to remove an entry is to delete the whole document.

We run the service ourselves and these five companies handle parts of it for us. Nobody buys it, licenses it or receives it for their own purposes, and the site carries no advertising or analytics trackers.

DeepSeek receives nothing until you use an AI feature. If you never open AI drafting or insights, no document text is sent to it.

The database sits on our own server in Microsoft Azure's Central India region. PDFs and signature images sit in Wasabi's us-east-1 region in the United States. So a single document is split across two countries, and if you are in the EU or the UK, both of them are outside it.

Deleting a document moves it to the bin, where you can restore it for 14 days. After that a daily sweep removes the record, the PDF and the signature images for good. We keep no per-document backup, so once that sweep has run there is nothing left for us to recover.

Email delivery records go after 90 days. Everything attached to your account stays until you ask us to close it.

Write to [email protected] and we will do any of these within 30 days:

• send you a copy of everything we hold about you
• correct anything that is wrong
• close your account and delete the documents in it

One limit is worth knowing before you ask. If you signed a document that belongs to somebody else, your name, email and audit entries are part of their record rather than yours, and closing your account does not remove them from it. Ask whoever sent you the document.

One cookie, called qs_session. It holds your signed-in session, lasts 30 days and is set httpOnly, so no script running on the page can read it. There are no advertising cookies, no analytics cookies and no third-party cookies anywhere on the site.

LoreSign is for people old enough to enter into a contract. Do not use it if you are under 18.

We update this page when what we actually do changes, and the date at the top moves with it. If a change widens what we collect or adds a company to the table above, account holders get an email before it takes effect, because a policy change nobody was told about is a policy change nobody agreed to.

[email protected]