Privacy Policy
Effective June 4, 2026
Our approach
Tarchos Sign is built privacy-first for small businesses. Your documents are private, encrypted at rest, and never made public. Your data stays yours.
Information we collect
Account information (name, email, organization) you provide; documents and signature data you upload or capture; and operational metadata needed to provide the Service — including, for legal traceability, the IP address, timestamp, and browser user-agent of signers, recorded in each document’s audit trail.
How we use information
To provide and secure the Service, deliver documents for signature, generate audit trails and completion certificates, process payments, and communicate with you. We do not sell your personal information.
Where documents are stored
Documents, signatures and audit records are stored on servers we operate, with stored files encrypted using AES-256-GCM. The optional automatic field detection that suggests where signers should sign also runs on our own server; documents are not sent to an outside AI provider for it.
Service providers
We use a small number of providers, only for the purposes listed: Cloudflare (network delivery and security, which sees visitors’ IP addresses), Stripe (payments; we never see or store full card numbers), and Resend (delivery of signing requests and notification emails). They process data on our instructions to deliver the Service.
Cookies and advertising
The app uses cookies needed to keep you signed in. Our public marketing pages load Google’s advertising tag to measure sign-ups that come from our Google Ads, and some content pages load Google AdSense code; Google may set its own cookies when these load. The Google Ads tag also measures purchases on the billing page. Advertising tags are not loaded on document or recipient signing pages, or on sign-in and password-reset pages. Our own page analytics are first-party, count visits and button clicks without cookies, and store only a coarse country, never your IP address.
Security
We apply encryption at rest for stored documents, scoped access controls, audit logging, and secure, expiring links for recipients. No system is perfectly secure, but we treat your agreements with care.
Retention
We retain documents and audit records for as long as your account is active or as needed to provide the Service and meet legal obligations. You may request deletion of your data, subject to records we must retain by law.
Your choices
You can access and update your account information, export completed documents, and request deletion by contacting us. Recipients may decline to sign electronically.
Contact
Privacy questions: [email protected].
This document is provided as a starting template and does not constitute legal advice. Tarchos LLC recommends review by qualified counsel before relying on it.