Privacy policy

This policy explains what information DocuStamp collects, how we use it, and the choices you have. It covers the DocuStamp service we run at sign.docustamp.dev, this website (docustamp.dev), and the DocuStamp connection for AI apps. DocuStamp is run by Ophy Labs Inc, and "DocuStamp", "we" and "us" mean Ophy Labs Inc.

DocuStamp is also open source. If someone else hosts their own copy, they run it, and their own privacy terms apply. This policy only covers the service we run.

What we collect

• Account details: your name, email address, company, job title, the signature you save, and your sign-in details. If you sign in with Google, we receive your name and email address from Google.
• Documents: the files you upload, the fields placed on them and the values filled in, and documents other people send you to sign.
• People you send documents to: the names, email addresses and any phone numbers you enter for signers.
• Audit records: when a document is sent, opened, signed, declined or completed, who did it, and the IP address and browser used. For finished documents we also keep a certificate and a SHA-256 fingerprint of the signed file.
• Connected AI apps: when you connect an AI app such as ChatGPT, Claude or Cursor, we keep the connection, the permission you chose (read only, send, or sign for you), and a record of what the app did for you. If you set rules for your AI, we keep those settings.
• Messages: emails we send for you (signing requests, reminders, completion notices) and emails you send to our @docustamp.dev addresses, such as support@docustamp.dev.

How we use it

• To run the service: store your documents, send them for signature, collect signatures and finish them.
• To keep proof: audit trails and certificates let anyone check who signed, when, and whether a file changed.
• To keep accounts safe and stop abuse, including rate limits and security checks.
• To answer you when you contact us.
• To meet legal duties.

We don't sell your information, and we don't use it for advertising.

AI features

Some features use AI: finding who signs where and placing fields, reading the terms of a document, and signing your part when you allow it. When you use them, the document's content is sent to Claude, an AI model made by Anthropic, through Amazon Bedrock on Amazon Web Services, to produce the result. Under Amazon's terms for Bedrock, your content isn't used to train its models.

If you connect an AI app, that app receives the information you let it access, such as your documents and their status. What the app does with that information is covered by that app's own privacy policy. Connected apps never receive other people's signing links.

Who we share it with

• The people involved in a document: signers see the document you send them, and everyone on a finished document can get the signed copy and its certificate.
• Service providers that run parts of DocuStamp for us: Amazon Web Services for hosting, file storage, email and AI processing, and Google if you choose to sign in with Google.
• The law: if we're legally required to, or to protect people, our users or the service.
• A new owner: if DocuStamp is sold or merged, your information may move with it, under this policy.

This website

docustamp.dev doesn't use cookies, analytics or advertising trackers. The DocuStamp app uses your browser's storage to keep you signed in.

How long we keep it

We keep your account and documents while your account is open. Finished documents and their audit records are kept so they can serve as proof, until you delete them or close your account. Copies in backups are removed as those backups expire.

Your choices

• You can disconnect an AI app at any time, or limit it to read only.
• You can ask to see, correct, export or delete your information by writing to support@docustamp.dev.
• If you live in a US state with its own privacy law, such as California, you may have extra rights, like knowing what we collect and asking us to delete it. Write to us and we'll help. We won't treat you differently for asking.

Security

DocuStamp uses HTTPS, signed links that only work for the intended signer, limits on what each connected app may do, and fingerprints that show if a signed file was changed. No system is perfectly secure, so please keep your sign-in details safe and tell us right away if you see something wrong.

Where your data is

DocuStamp is run from the United States, and your information is stored and processed there.

Children

DocuStamp is for adults. We don't knowingly collect information from children under 13.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell account holders by email before it takes effect.

Contact

Questions about privacy: support@docustamp.dev.