MyPerfectDoc
Draft. This page is awaiting legal review, and the details in square brackets are still to be confirmed. MyPerfectDoc is in private testing and isn’t open to the public yet.

Privacy Policy

Draft dated 4 November 2026.

Who is responsible

MyPerfectDoc is operated by [legal name and registered address]. For privacy questions or requests, contact [contact email].

The person who sends a document decides what goes in it and who it goes to. For the content of a document, please contact its sender first.

What we collect

  • Account holders: name, email address, a scrambled (hashed) password, and login sessions.
  • Documents: the PDFs you upload, the signed copies, and their digital fingerprints (hashes).
  • People asked to sign: name and email address, as entered by the sender.
  • Signing activity: signature images, text entered into fields, the time of each step, IP address, and browser details.
  • Email codes: a scrambled copy of each one-time code, and how many times it was tried.

Why we use it

  • To run your account and deliver documents and emails.
  • To confirm who took each step, and keep evidence of how a document was signed.
  • To keep the service secure and prevent abuse.

[Legal bases for processing, to be confirmed by legal counsel.]

Who can see it

  • Everyone on a document receives the signed copy and its certificate. That shows each signer’s name, email address, signature, browser details, and signing times. IP addresses are only partly shown on the certificate.
  • The sender can also export the document’s full audit log, which includes complete IP addresses.
  • Our service providers process data for us, and only to run the service: Vercel (hosting), Neon (database, United States), Cloudflare (file storage), and Resend (email).

We don’t sell personal information and we don’t use it for advertising. We may share it if the law requires us to.

[International transfer safeguards, to be confirmed by legal counsel.]

Cookies

We use only the cookies needed to run the service: login cookies that keep you signed in, and one that remembers for up to two hours that a signer has confirmed their emailed code.

How long we keep it

Sent documents, signatures, and audit logs are kept so that the record stays reliable, and can’t be deleted from an account. Unsent drafts can be deleted at any time. Email codes stop working after 10 minutes. [Retention period, to be confirmed.]

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict use of your personal information, or to complain to a data protection authority. Contact us using the details above. Some signing records may need to be kept even after a deletion request, where the law allows it.

Security

Documents are stored in a private bucket, and download links expire within minutes. Signing links are stored only as hashes, and a link can’t open a document without the code emailed to the person invited.