Privacy

Last updated: 30 August 2026

This page describes exactly what happens to your files and your data. It is written to be specific rather than reassuring, because a vague privacy promise is worth nothing.

Fill & sign PDFs

Your PDF is never uploaded. The editor runs entirely in your browser: the file is read into memory on your own device, rendered there, and the signed copy is written there. No part of the document is transmitted to our servers at any point. There is no retention period because there is nothing to retain.

Our server is involved only to confirm you have a credit available and to record that one was used. It receives no information about the document — not its name, size, page count, or contents.

Receipt scanning

Reading a receipt requires a server, so this service works differently and you should understand the difference.

• Your image is received into memory and is never written to disk, never placed in object storage, and never queued.
• It is sent to our AI provider, Anthropic, for transcription. We operate under a zero-data-retention arrangement, meaning they do not store the image or use it for training.
• The resulting spreadsheet is returned directly in the response. We do not save it and there is no download link, because a link would imply a stored file.
• Once the response is sent, the image and the extracted figures are gone. We cannot recover them, and neither can you — keep your own copy.

Because we send the image to Anthropic, our promise depends partly on them. We think it is important to say so plainly rather than imply the image never leaves our control.

What we do keep

Only what is needed to run a paid account:

• Your email address.
• Your credit balance and a dated record of each purchase, use, and refund. These records note that a credit was used and for which service — never a filename, never document contents, never extracted figures.
• Payment records from PayPal: an order reference and amount. We never receive or store your card details.
• The consent you gave at checkout, with a timestamp and IP address. We keep this because it is what we would rely on if a payment were ever disputed.
• Server logs containing request timing and error information, retained 30 days.

Your rights

You can request deletion of your account at any time; we will remove your email and session data. Purchase records are kept where tax or accounting law requires it. To exercise any of this, email us from the address on your account.

Contact: privacy@signslip.com