Delete your data.
Your data, gone. Without asking us.
You do not need to email anyone or wait for a human. Enter your address, click the link we send, and it is done. We confirm by email because deleting is permanent and because otherwise anyone who knew your address could erase your contracts.
What gets deleted.
- Every document you sent, including the original PDF, the signed PDF, and the audit certificate.
- Anything each signer typed into those documents.
- Your logo and branding, your webhook endpoints, and your saved settings.
- Your saved contacts: every counterparty name and email address you had stored.
- Every link between your email address and your workspace, in both directions.
- Your free-plan record and your marketing record, so the onboarding emails stop.
- Any API keys issued to you, revoked so they can no longer act as your account.
What we keep, and why.
For any document that was already completed, we keep a verification record: the 64-character SHA-256 fingerprint of the document as it was sent for signature, the fingerprint of the signed PDF we issued for it when one was produced, the number of signers, and the dates it was created and completed. There is no name in it, no email address, and none of the document text, and a hash cannot be reversed back into any of those.
We keep it because a contract has more than one party. Deleting it would let one side of an agreement remove the record that the agreement was completed at all. Anonymous records like this are what data protection law expects to remain once personal data is erased.
We also keep billing and tax records, which we are legally required to retain and which the right to erasure specifically does not cover. We strip your email address, name, and city out of them, keeping only the financial fields.
If you were an ambassador, we keep the payout and tax history for the same reason, with your email address removed and both lookup indexes deleted, so the record is no longer traceable back to you.
Finally, if a signed document was already emailed to you or to a counterparty, that email and anything either of you downloaded is yours and theirs. We cannot reach into anyone's inbox or hard drive.
Things worth knowing first.
- It cannot be undone. Download anything you still need before you confirm.
- Signers lose access too. Anyone you sent a document to will no longer be able to open it from our link, so tell them to save their copy first.
- Emails already sent stay sent. We cannot reach into anyone's inbox.
- Backups. Deleted data can persist in our encrypted daily backups until they age out, which takes up to 35 days. They are never restored selectively.
- Deleting your data does not cancel a paid plan. Cancel billing from your dashboard first, or you will keep being charged for an empty account.