Privacy policy

Version 2026-10-20

Last updated: 2026-10-20

This policy explains what Sigil ("we", "us"), operated by Darklight Interactive, collects when you use https://www.signwithsigil.com and the documents sent through it, why we collect it, and what you can do about it.

Who this covers

There are two kinds of people here:

  • Account holders create an account, upload documents and send them for signature.
  • Signers and recipients receive a link from an account holder, review a document and sign it, or receive a signed copy. Signers do not need an account.

What we collect

From account holders

  • Account details: your name, email address and a password hash (we never store the password itself), or the identifier Google gives us if you sign in with Google.
  • Documents: the PDF and Word files you upload, the pacts you create from them, the recipients you add and the messages you write. Documents stay in your account until you delete them.
  • Billing: your subscription plan and the identifiers Stripe assigns to your customer record and subscription. Card numbers go directly to Stripe and never touch our servers.
  • Custom domains: the hostnames you bind to your account and the branding (name, logo, colour) you upload for them.
  • API keys: we store a one-way hash of each key, its name, and when and from which IP address it was last used.
  • Usage records: the time, IP address and browser of logins and of changes to pacts, so that activity on your account can be audited.

From signers

When you open a signing link we record the time, your IP address and browser identification. When you sign we also record the name you type, the signature image you draw, the values you enter in the document's fields, the version of the electronic-records consent you accepted and the time you accepted it. These details are written into the certificate of completion that accompanies the signed document, because that is what makes the signature verifiable later.

Automatically

Our web server keeps standard request logs (address, time, page, browser) for a short period for security and troubleshooting. We do not use advertising or analytics trackers.

Cookies

We set a small number of first-party cookies: one that identifies your browser, one that keeps you logged in, and the anti-forgery token that protects forms. If you switch the colour theme, that preference is kept in your browser's local storage. None of these are shared with anyone.

Why we use this information

  • To provide the service: deliver signing links, record signatures, produce signed documents and certificates, and send the emails that go with them.
  • To bill subscriptions and prevent abuse of free plans.
  • To keep accounts secure and investigate misuse.
  • To answer messages you send us.

We do not sell personal information and we do not use documents or their contents for anything other than delivering them to the people the account holder chose.

Who else sees it

  • Amazon Web Services hosts our servers and database and sends our email (Amazon SES). Data is stored in the United States.
  • Stripe processes subscription payments and holds your payment details.
  • Google, only if you choose to sign in with Google, tells us your email address and name.
  • The account holder who sent a document can see everything a signer entered into it and the certificate of completion.

We disclose information when the law requires it or to protect the service and its users from harm.

How long we keep it

Documents and pacts stay until the account holder deletes them or closes the account. Certificates of completion are kept with the signed document, since they are part of its evidential value. Server logs are kept for no more than 90 days. Stripe retains billing records as the law requires it to.

Your choices

You can edit your name, change your password and delete templates and pacts from your dashboard. To close your account or ask for a copy of the data we hold about you, email info@signwithsigil.com. Signers who want a document removed should contact the account holder who sent it, since it is their record; we will help where we can.

Children

The service is not directed to anyone under 18, and we do not knowingly collect information from children.

Changes

When this policy changes, the date at the top changes with it and account holders are told at their next login. Continued use after that is acceptance of the new version.

Contact

Darklight Interactive PO Box 772493, Miami, FL 33177 info@signwithsigil.com