Privacy notice
How we use your information, who can access it, and how to manage it.
On this page
Information and use
| Information | Purpose |
|---|---|
| Account and contact details Email, verification and authorization records, hashed credentials and email delivery status. | Provide sign-in, project messages and account security. |
| Project information Agreement, delivery and review content; participants, organizations, authority statements, file references and fingerprints; signed decisions. | Record the agreement, delivery, acceptance and their history. |
| Signing services Service orders and usage, credits and payment references, signed originals, process evidence and verification results. | Provide authorized signing services and agreed verification. |
| Billing information Payer and contact details, permissions and purchase consent, quotes, orders, tax details, transactions, refunds and credit history. | Deliver purchases, manage billing, and handle accounting, security and specific disputes. |
| Support enquiries Messages, contact details, relevant project context and internal follow-up notes. | Respond and follow up. Internal notes stay private; attachments and project originals are not imported automatically. |
| Optional analytics Details you report in Delivery insights and optional usage events on public template pages. | Provide private delivery insights and aggregated platform reports. |
Required fields enable the requested operation; optional notes are voluntary.
Original files
Custom-delivery files are fingerprinted in your browser; their contents are not uploaded. Keep originals in storage both parties can access. Signed-service originals are handled as described above.
Share only necessary information you are authorized to provide. Keep passwords, access tokens and payment credentials out of project text, file names, links and support messages. This notice and project confirmation do not authorize unrelated marketing or blanket personal-data use.
Details of optional analytics
Delivery insights are notes you choose to report about projects, help, clarifications and record use. They are visible only to your account and are not added to shared records.
Public template pages may record views, use and draft preparation with a random path identifier, template version and time. These events exclude draft text, email, IP addresses and full referrer URLs. Browser privacy signals disable these events.
Source categories, campaign codes and public-summary references may be kept in the session for 30 minutes; privacy signals disable this. Referrer URLs are classified locally, not saved. A project may retain its reported source, campaign label and path identifier.
Access and sharing
Project access follows account permissions or private invitations. External files keep their own access settings.
Record links last seven days and default to named recipients with email verification. You may explicitly allow anyone with the link; either party may revoke it.
Public summaries require both parties to approve the same version. Withdrawing publication or access cannot recall copies already saved by others.
Authorized signing sends the fixed statement and necessary signer details to the chosen signing service. The other party sees permitted progress and evidence, not private billing records.
Billing records are limited to authorized billing members and financial operators. Paying does not grant project access, and project or support access does not grant billing access. Infrastructure access is controlled separately.
What a sharing link includes
A new link includes the history available when created; later updates require the sender’s choice. Either authorized party can share without joint approval. Agree confidentiality limits first. Older links keep their scope until replaced or revoked.
Retention and deletion
| Information | Current retention and deletion |
|---|---|
| Account and browser drafts | Account drafts expire after 30 days and are deleted on a later draft save. Browser drafts may remain until you clear them. |
| Saved record copies | Saved copies remain after invitation expiry or revocation while your account and the service are available. Removing one deletes that online copy only; source records, other copies and backups are separate. |
| Signed project history and signing evidence | No automatic deletion or self-service account deletion currently removes signed history. You may request a review. Archiving, link expiry or disconnecting signing services does not delete stored history or evidence. |
| Optional analytics | Template events expire after 90 days and are deleted when a later event is processed. Private insights have no automatic expiry; clear them in Delivery insights. Backups may retain copies. |
| Billing information | Credit, service and online-record periods follow the accepted quote. Necessary accounting or dispute records may remain afterwards; they have no automatic cleanup and require purpose-based review. Backups and payment-provider records are handled separately. |
| Other personal information | Account, support and security records have no single fixed period in this notice. Ask us about retention or request a review. |
Signed history is not a reason for indefinite retention. Reviews consider purpose and other participants’ rights, and record what remains, why and when it will be reviewed again.
Keeping your own archive
Keep your own verification package, PDF, original files and trusted issuer keys. Saved copies contain signed history, not live status or future access. Links are not permanent archives; availability and zero data loss are not guaranteed.
Data processing and security
Cloud hosting stores application data; email services process recipients and message content; support services handle correspondence; payment services process checkout details. We retain order and transaction references for reconciliation.
Service providers may process data outside your region and retain email content. Contact us before use if you need specific storage locations, access or backup arrangements. We may disclose information as required by law.
Stored project text is readable by Prooftask and is not end-to-end encrypted. Signatures protect integrity, not confidentiality. The downloadable verifier checks files locally without uploading them.
Your data choices
Request access, correction, deletion, restricted processing or preservation, or ask about account closure. We review the scope and applicable obligations; requests do not automatically delete shared records or recall others’ copies.
Support is available without sign-in. Personal-data requests may require identity verification.
Operator and contact
Service operator: Human Judgment Technology Services Limited
Jurisdiction: Hong Kong
Contact address: RM11，13/F,Blk C,Wong King Ind. Bld.，192-198 Choi Hung Rd, San Po Kong, Kow loon. Hong Kong