Privacy Policy

Last updated September 8, 2026

This explains what DollarSign.io collects, why we collect it, who else touches it, and how to get it deleted.

The short version. We collect what we need to deliver your document and to prove how it was signed — names, email addresses, the document itself, and the IP address and browser of each signer at the moment they consented and signed. We do not sell it, we do not advertise, and we do not track you around the internet. Email support@dollarsign.io to have your documents deleted.

What we collect

Information you give us

Your name and email address as the sender of an envelope.
Each signer's name and email address, as entered by the sender.
Your document. When you upload a file, it is converted in your browser into page images, which are then uploaded and stored on our server. Whatever your document contains, we store.
Field values entered by signers — drawn or typed signatures, dates, and text.

Information we record automatically

To make a signature defensible under the ESIGN Act, we have to record how it happened. For each signer we log, server-side:

The time they consented to sign electronically, with their IP address and browser user-agent
The time they submitted their signature, with their IP address and browser user-agent
Confirmation that they paged through the whole document and affirmed intent to sign
Each time an invitation was sent or resent, and to which address

This audit trail is embedded in the Certificate of Completion attached to the final PDF, which means every party to the document can see it — including the IP addresses and timestamps of the other signers. That is the point of the record, but it is worth knowing before you sign something.

Payment information

Payments are processed by Stripe on Stripe's own hosted checkout pages. Your card number never reaches our servers and we cannot see it. We receive a confirmation from Stripe containing a payment identifier and the billing email you gave them.

What we do not collect

No accounts, no passwords — there is nothing to sign into.
No advertising or analytics trackers, and no third-party cookies set by us.
No cross-site tracking, no data brokers, no profile building.

How we use it

Only to run the Service:

To deliver signing invitations and notifications by email
To display your document to the people you sent it to, and to assemble the final signed PDF
To produce the audit certificate and the SHA-256 fingerprint of the completed document
To take payment and issue refunds
To answer your support emails
To investigate abuse or fraud, and to comply with the law

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your documents to train machine-learning models.

Who else handles your data

We use a small number of service providers, all located in the United States:

Railway — hosting and file storage. Your document images and the database live on a private storage volume there.
Stripe — payment processing. Stripe handles card data under its own privacy policy.
Resend — transactional email delivery. Resend sends our mail through Amazon SES, so the contents of our notification emails, including signing links, pass through both.

We may also disclose information if we are legally required to, or where we believe in good faith it is necessary to protect someone's safety or to investigate fraud. If our business is ever sold or transferred, envelope data may transfer with it, subject to this policy.

How documents are protected — and the one thing to know

Traffic to the site is encrypted with HTTPS. Documents are stored on a private volume that is not publicly browsable, and completed documents are fingerprinted with SHA-256 so tampering is detectable.

Access is by link. Envelope and signing URLs contain long random identifiers that cannot practically be guessed, but there is no password on them: anyone who has the link can open that envelope. This is what makes signing work without accounts, and it is the same trade-off most signing services make — but it means you should treat a signing link like the document itself, and avoid forwarding it to people who should not see it.

No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur.

How long we keep it

We keep envelopes and completed documents indefinitely, so that you can retrieve them later using the original link or the find my document page. We would rather you be able to pull up a contract in three years than have it disappear.

If you would rather it not be kept, email support@dollarsign.io from the address associated with the envelope and we will delete the document, its page images, and its audit record. Deletion is permanent and cannot be undone, so download your copy first. We will confirm when it is done, normally within a few business days.

Some records outside the envelope itself — payment records held by Stripe, email delivery logs held by Resend — are retained by those providers under their own schedules and may survive deletion of the document.

Your choices

Get your documents back. Use find my document to have links emailed to the address you used.
Get a copy of your data, or ask what we hold about you — email support and we will send it.
Delete it. See above.
Correct it. Names and email addresses on a sent envelope cannot be edited, because the audit record has to stay accurate. If something is wrong, ask us to delete the envelope and send a new one.

Depending on where you live — California, Colorado, Connecticut, Virginia, and a growing number of other states, or the EEA and UK — you may have statutory rights to access, delete, correct, or port your personal information, and to be free from discrimination for exercising them. We honor these requests from everyone, regardless of where you live. Email support to make one. If you are unsatisfied with our response, you may have a right to appeal or to complain to your state attorney general or data protection authority.

Signers, as distinct from senders

If you received a document to sign, the sender chose to send it to you; we did not obtain your address from anywhere else. You can decline to sign simply by not signing. If you believe you received a document in error or do not want your information retained, email support@dollarsign.io and we will look into it. Note that an envelope you have already signed belongs to the other parties too, and we will weigh their interest in keeping the record before deleting it.

Children

The Service is not directed to children and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has used the Service, email us and we will delete the data.

Changes to this policy

We may update this policy. The "last updated" date at the top reflects the current version. If a change materially reduces the protection of information we already hold, we will make a reasonable effort to notify affected senders by email.

Contact

Live, Love, Learn, Leave a Legacy LLC
support@dollarsign.io