Privacy Notice
This notice explains what Rook Industries, Inc. collects through docuinked. If someone sent you a document to sign, this notice applies to you too, even though you didn't choose us.
Last updated 2026-11-07. Public beta. These terms apply to every account; countersigned copies on request.
Two roles
For account holders, we decide how your account data is used, so we are the controller. For documents and signer details sent through the service, our customer decides. We process that data for them, under the data processing terms. If you signed a document and have a question about it, start with the person who sent it.
What we collect
| Who | What | Why |
|---|---|---|
| Account holders | Name, email, organization, password hash, two-factor setup | To run your account and keep it secure |
| Account holders | API key hashes, usage and security logs | To run the API and stop abuse |
| Senders | The PDFs you upload, signer names and emails, fields | To do what you asked |
| Signers | Name, email, the signature you make, field values | To complete the document |
| Signers | IP address, browser details, the time of each step | To record what happened, as evidence |
| Website visitors | Standard server logs | To run and secure the site |
We keep a drawn signature as a flat image. We don't record pen speed or pressure. We don't take face scans or ID images.
What we don't do
We don't sell personal data. We don't use documents to train AI models. The public site has no third-party trackers or advertising cookies. We use a cookie to keep you signed in, and a short-lived one for a signing session.
Who processes it
We use a small list of vendors, on the subprocessors page. The public PDF checker receives a file fingerprint only, never the file.
How long we keep it
During the beta, we keep documents and evidence while the account is active, unless the customer deletes them. Evidence exists to answer later disputes, so we can't always delete a record when one signer asks. We send those requests to the customer who holds the document. Test-mode documents are deleted 30 days after they're made. We keep security logs only as long as we need them. The period for each kind of data is in our Retention Policy.
Your choices
Depending on where you live, you may have rights to see, correct or delete your data, or to object to some uses. Write to support@docuinked.com. If your data sits in a customer's document, we will pass your request to them. Some data may be kept where the law allows, such as for legal claims.
Security
See our security page, which also says what a beta doesn't have yet. No system is perfectly secure.
Children
The service isn't for anyone under 18.
Where data is stored
The service runs in the United States.
Contact
Rook Industries, Inc., 30 N Gould St Ste R, Sheridan WY 82801. Privacy questions: support@docuinked.com. Legal: legal@docuinked.com.