Privacy Policy

SignNDA (signnda.online) is operated by TwoEleven LLC, a Delaware limited liability company, in the United States. You reach us through the contact form.

Your email address, when you make an account or sign in, and when the account was made and last used. Which version of the Terms of Service you agreed to, when, and on which page (signing up, signing in, or opening an invitation).

What you put in an agreement: the parties’ legal names, entity types, where each is organized and based or, for an individual, lives, an individual’s business name, who signs for each and their titles, their email addresses, and the choices on its Cover Page (the purpose, the term, the confidentiality period and the governing law). Your own side’s details are also kept as your profile, to fill in your next agreement.

When you use an emailed link to sign in or to open an invitation: the IP address it was used from and your browser’s description of itself (its user agent, which names the browser and the kind of device). They are kept with your session, which lasts 30 days or until you sign out.

When you sign: the name you type, your title, the email address you confirmed and when, the two statements you agreed to (that you may sign for your side, and that you agree to sign electronically), how your signature looks (a handwriting and ink, or the picture you drew or uploaded, kept as plain pixels and nothing else from the file), the time, and the IP address and user agent both when your emailed link was used and when you signed. The signing receipt, which both parties get, shows those addresses and names the browser and device. The exact text of each version sent to sign is kept with its fingerprint (SHA-256), so either party can show what was signed.

The record of each agreement: who started, signed, sent, opened, asked for a change to, declined or withdrew it, and when, with the emails we sent about it. Both parties see it. Once both have signed, the signed PDF and the signing receipt are kept with the agreement, and each party is emailed a copy.

On Premium, what you set on your account page: your logo (kept as plain pixels, nothing else from the file), the Cover Page choices your new agreements start with, and whether we send reminders for you. An agreement you send keeps the logo it was sent with, which both parties see, in its PDF too. A logo you remove is deleted, unless an agreement was already sent with it. These settings are kept if you move to Free, and do nothing there.

If you are invited to sign, the person who sent the agreement entered your details: your organization, where it is organized and based, your name and title, and your email address. Opening the invitation confirms that address and, if you have no account, makes you one on Free to keep the agreement in. When you sign, your side’s details become your profile, unless you have one already.

A draft you start before signing in stays in your browser and is not sent to us until you sign in.

We keep no log of visits. Apart from what is listed above, the address a request comes from is held in memory for up to an hour, to limit how often sign-in links and contact messages can be sent, and then forgotten.

There is no advertising, no analytics and no tracking on SignNDA, and nothing about you is sold or shared for any of them. We do not use your information to train AI models.

One cookie, which keeps you signed in for 30 days or until you sign out. Your browser’s own storage keeps a draft started before signing in and your choice of light or dark.

SignNDA does not track you across other sites, and lets no one else do so on it, so there is nothing for a Do Not Track signal to turn off. Every visitor is treated the same, whether or not the browser sends one.

SignNDA runs on its own server in the United States, which also makes the PDFs. Cloudflare carries the site to you, and so sees each visitor’s IP address and request as it passes through. Resend sends our email: sign-in links, invitations and reminders, notices about your agreements, the signed copies, and contact messages to us. Cloudflare R2 holds encrypted copies of the database. Each handles your information only to do that for us. When Resend tells us that an email about an agreement was not delivered, the agreement’s record says so.

A message sent through the contact form is emailed to our own mailbox, which Apple’s iCloud Mail keeps, and is not stored by the site.

Your account, profile and agreements are kept until you ask us to delete them. Encrypted copies of the database are kept for 30 days, so a deletion leaves them within that time.

Deleting your account removes your account, your profile, your Premium settings and the drafts you never sent. An agreement you sent or signed is the other party’s too: it stays in their account, with its record, its signed PDF and its receipt, and neither of us can take back a copy that was emailed.

The site is served only over HTTPS. Sign-in links work once, for 15 minutes, and we keep only a fingerprint (SHA-256) of each link and of each session, never the link or the session itself. Each signed PDF and receipt is kept with its own fingerprint and checked against it every time it is downloaded. Each agreement’s history is kept as a chain, every entry’s fingerprint covering the one before it, so a change to it would show. The database is encrypted on our server’s disk, and backups are encrypted before they are copied anywhere. No system is perfectly secure; if your information is exposed, we tell you as the law requires.

You can ask to see what we hold about you, to correct it, or to delete your account, through the contact form. We confirm the request with your account’s email address before acting on it.

SignNDA is for adults using it for business or professional purposes, not for anyone under 18.

A new version of this policy is posted here with its effective date, and every version stays at its own address. A change to what we do with your information is emailed to account holders at least 30 days before it applies.