Data Processing Terms
These terms apply when docuinked processes personal data on a customer's behalf. They form part of our Terms of Service. They apply to every account automatically. Customers who need a countersigned copy, EU Standard Contractual Clauses (Module 2) or the UK Addendum can request them from legal@docuinked.com; we return them within 5 business days.
Last updated 2026-11-07. Public beta. These terms apply to every account; countersigned copies on request.
Roles
You are the controller of personal data in your documents, including signer names, emails and evidence. Rook Industries, Inc. is your processor. We are a controller for account, security and billing data, as our privacy notice describes. For California law, we act as a service provider: we don't sell or share your personal data, and we use it only for the purposes in these terms.
What we process
| Item | Detail |
|---|---|
| Subject | Running the service you asked for |
| Duration | While you have an account, and any period below |
| Nature | Storing, stamping, sealing and delivering documents |
| People | Your users, signers and people named in documents |
| Data | Names, emails, signatures, IP addresses, browser details, and anything in your documents |
Don't send special category data or protected health information.
Our commitments
- We act only on your instructions, which are these terms and how you use the service.
- People with access are bound to keep data confidential.
- We apply the measures on our security page. That page also says what isn't in place during the beta.
- We use the vendors on the subprocessors page, with terms that protect the data. We will post changes and you may object. Hosting is on Rook-operated servers in the United States. A change of hosting provider is a subprocessor change, with 30 days' notice.
- We pass on requests from people about their data, and help you answer them as we reasonably can.
- We will tell you without undue delay if we find a personal data breach affecting your data.
- We will give you what you reasonably need to show we meet these terms. We have no audit reports yet.
- We do not store or process protected health information or special-category data on purpose; don't send it. If you need to sign documents containing such data, contact us first.
Transfers
The service runs in the United States. If you send data from elsewhere, you are responsible for having a lawful basis for that transfer. Where you transfer personal data from the EEA, UK or Switzerland, the parties enter into the EU Standard Contractual Clauses (Module 2, controller to processor) and the UK International Data Transfer Addendum, with these terms as the commercial terms, our subprocessors authorized under Clause 9(a) option 2, and Ireland as governing law and forum for the clauses.
Deletion and the evidence record
You control deletion of your documents. When an account ends, we delete your data in a reasonable time unless the law requires us to keep it. An evidence record exists to answer later disputes, so a request from one signer doesn't by itself delete it. Export first. Retention periods are in our Retention Policy, which forms part of these terms.
Security incidents
We will notify you without undue delay, and within 72 hours of confirming, any personal data breach affecting your data, with what you reasonably need to meet your own notification duties.
Contact
legal@docuinked.com. Rook Industries, Inc., 30 N Gould St Ste R, Sheridan WY 82801.