Your data is yours.

1. Who this covers

asSigned is made by Work As Intended LLC, based in California, USA ("we"). This policy covers people who visit as-signed.com, people with an asSigned account, and the people they send documents to.

For your account, we decide what's collected and why. For the documents you send and the people who sign them, you decide, and we handle that information on your behalf, under our Terms and, where it applies, our Data Processing Agreement.

2. What we collect and why

We collect only what asSigned needs to work.

Your account

You create your account by signing in with Notion, which tells us your name, email address, your Notion user and workspace IDs and your workspace's name, and gives asSigned access to the pages you share with it. We keep these to run your account and to write to you about it. The access to your Notion is stored encrypted. After that you can also sign in with a link we email to your account's address. It works once, for 15 minutes, and until then we keep only a fingerprint of it. Your sender name and, on Unlimited, your logo are kept to show your signers who a document is from.

The pages you share

asSigned reads only the Notion pages and databases you share with it, and writes back only what it's there to do: the status, a comment when something needs you, and the signed PDF. It keeps a copy of a document only while it's out for signature. The trust center lists exactly what, and for how long.

Payments

If you upgrade, Stripe takes your payment. Your card number goes straight to Stripe and never reaches us. We keep your Stripe customer number, your plan and when it renews. Stripe keeps your billing address and invoices, as its own privacy policy says.

Partners

If you recommend asSigned as one of our partners, such as a Notion Expert, we keep your name, email address and discount codes, and the amounts and dates of the commission you've earned and of what we've paid you, so we can pay you and keep our tax records. We keep no bank or tax details: payouts happen outside asSigned. What we've paid you is kept after you stop being a partner, for as long as tax law requires. If you signed up with a partner's code, they see how many clients they've brought and what they've earned from them, never your name or anything you send.

Keeping the free plan fair

To stop the free plan or a free-time code being claimed again and again, we keep how many free documents an email address, a Notion user and a Notion workspace have had, and which codes they've used. We keep them as one-way fingerprints, never the addresses themselves, for 2 years after they were last used.

Asking for help

If you write to us, we keep the conversation so we have it if you write again. If you ask for help from Notion, with Get help or through an assistant, the request goes into our own support list in Notion: who asked, about which account and document, and what asSigned found. Never a document's text.

Logs

Like any website, asSigned's servers log each request: the IP address, the browser, the page and the time. We use them to keep asSigned secure, to limit abuse and to fix errors, and delete them after 30 days.

Cookies

The asSigned app uses only the cookies it needs to sign you in, keep you signed in and take you back to where you started. This website sets no cookies at all. Neither has analytics, ads or tracking, and neither loads anything from another company: even the typefaces are asSigned's own copies.

The emails we send

asSigned sends the emails it's there to send: signature requests and signed copies on your behalf, and notices about your account, such as your free time ending. When someone replies to a signing email, asSigned passes the reply on to the sender and keeps no copy. We also send occasional product news, such as new features, to account holders. Each one has a one-click unsubscribe, and you can turn it off in Settings. Notices about your account still come.

3. If you've been sent something to sign

The person or business that sent you the document decides what happens to your information, and we handle it for them. To sign, asSigned uses your name and email address, the IP address and browser you sign from, your agreement to sign electronically, and your signature and answers. They go on the signed PDF's certificate, so the signature can be proved later.

asSigned deletes all of that once everyone has signed and the sender has the signed PDF, or as soon as the document is cancelled or expires. What stays, while the sender's account exists, is the record that proves the signed copy genuine: the document's title, who sent it, the signers' names, when each signed, and the PDF's fingerprint. The signed PDF itself is the sender's and yours.

For anything about your information in a document, ask the sender first. You can also write to support@as-signed.com and we'll help, or pass it on.

4. Who else handles it

We never sell your information or share it for advertising. Other companies handle it only to run asSigned: Amazon Web Services runs it, Cloudflare carries its traffic, Stripe takes payments and Notion holds our support requests. The trust center lists each of them, what for and where, and changes when they do.

We share information otherwise only:

• When you ask us to, such as putting a signed PDF in your Notion or sending an event to a webhook you set up.
• When the law requires it. We give information to authorities only when a valid legal order makes us, and we'll tell you first unless we're not allowed to.
• If asSigned changes hands. If another company took over asSigned, we'd tell you before your information moved or a different privacy policy applied to it.

5. When a person at asSigned looks

Only one person at Work As Intended, a co-founder, has access to asSigned. They don't look at your documents or your account, except:

• to help you, when you've asked for help and said it's fine;
• to fix an error that stops asSigned working and can't be fixed otherwise, looking at as little as they can;
• to investigate misuse that's been reported or detected; or
• when the law requires it.

6. How long we keep it, and how it's protected

We keep information only as long as asSigned needs it. The trust center gives the time for each kind: a document only while it's out for signature, backups 7 days, logs 30 days. Your account's own details are kept until you close it. Records we must keep by law, such as invoices, are kept as long as the law says.

Every connection is encrypted, and asSigned's copy of your documents is encrypted with a key that belongs to your account alone. When you close your account, that key is deleted with everything we held for it, and within 7 days it's gone from our backups too. The trust center has the details.

7. Your rights

Wherever you live, you can ask us:

• what information we have about you, and for a copy of it;
• to correct it;
• to delete it, or to close your account and delete everything in it;
• to stop or limit using it, or object to how we use it; and
• to send it to you, or to someone else, in a form a computer can read.

Write to support@as-signed.com, from your account's address if you have one, so we know it's you. We'll answer within 30 days. Using these rights never costs you anything or changes how we treat you. Some information we may have to keep, such as invoices the law says we must.

If you're unhappy with our answer, you can complain to your data protection authority. In California, we don't sell or share personal information, as California's privacy law defines it.

asSigned is for businesses, and isn't meant for anyone under 18.

8. Where your data is

asSigned runs in the United States, in Amazon Web Services' Oregon region, with backup copies in its Northern Virginia region. If you're outside the US, the information you give asSigned is stored and handled there. For businesses in the EU, the EEA, the UK and Switzerland, our Data Processing Agreement includes the standard contractual clauses that protect personal data sent to the US.

9. Changes and questions

If we change this policy, we'll change the date at the top, and for a change that matters we'll email account holders before it takes effect.

Questions about your data or this policy? Write to support@as-signed.com.

This policy is modelled on Basecamp's open-source policies, used under CC BY 4.0, and adapted for asSigned.