Privacy policy

Two kinds of people are involved here

Our customer is the Ounie account that sends an envelope. A signer is somebody that customer asked to sign a document. Signers have no account with us and never agreed to anything of ours — they received a link from someone they know. That difference shapes everything below.

What we collect from customers

When you sign in we receive your email address and display name from our identity provider (signin.ounie.com). When you send an envelope we store the document you supplied, its sha256 hash, size and page count, the subject and message you wrote, the names and addresses of the signers you chose, and the credit reservation and settlement.

What we collect about signers

When a signer opens their link we record the time. When they sign we record the time, the client IP address and user-agent string their browser sent, the full name they typed, and their explicit consent to sign electronically. That is the entire list.

We collect it because it is the product: an executed record with nothing behind it is worth nothing to either party. The signing page says exactly what will be recorded, in plain language, above the button and before anyone signs. An audit trail somebody only discovers afterwards is surveillance with a nicer name, and we would rather lose a signature than do that.

We do not collect anything else about a signer. No device fingerprint, no analytics identifier, no location — an IP address is a fact about a network connection and we never present it as a place.

Who decides what

Our customer decides who is emailed and what they are asked to sign. We provide the mechanism and keep the record. If you are a signer and want to know why you received a document, the right first question is to the person who sent it; if you cannot reach them, contact us and we will help.

What we don't do

We don't track you across the web. No third-party analytics, no advertising pixels, no session replay. The signing page loads no JavaScript at all, and sets no cookie.

We don't read your documents, train anything on them, sell them, or share them. Nothing you send is published: there is no public page for an envelope, and no share link.

We don't send marketing to signers. The only email a signer receives is the invitation, and the notice that the document completed.

Unsubscribing

Every invitation carries a working one-click unsubscribe. Using it stops all future signing invitations to that address, from any of our customers — including documents you may be expecting. We say so on the confirmation page, because that is a real consequence.

A bare click never unsubscribes anyone: the link shows a confirmation and the change only happens on submit. Mail-security scanners fetch every URL in an email, unattended, and one of them should not be able to opt you out of a contract.

Where it lives, and for how long

Documents and executed copies are stored privately on Amazon S3 and are never public. Reads happen through short-lived signed URLs minted per request, never stored and never embedded in an email. Envelope and audit records live in Ounie's shared Neon Postgres database. Invitations are delivered by Resend.

The audit log is append-only. Nothing in this application updates or deletes an event, including us — because if the executed PDF and the log ever disagreed, the log would be the record of truth, and that only holds if it is never edited. This means that satisfying an erasure request over a document somebody has signed is a decision we make by hand, weighing your request against the other party's interest in the record. Ask us and we will tell you what we can and cannot do in your case.

Your rights

Access, correction, export and erasure — open a privacy ticket and a person will read it. If you are a signer rather than a customer, say so and give us the envelope reference from the email.

Changes

We may update this policy. Material changes will be reflected in the date above, and that date only moves when something actually changes.

Contact

Get in touch, or email ounie@ounie.com.