Privacy Policy

1. Introduction

LinkFeather Inc. ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our electronic signature platform ("Service").

2. Information We Collect

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process electronic signatures and manage documents
• Generate audit trails for legal compliance
• Send transactional emails (signing requests, notifications)
• Process payments and manage subscriptions
• Respond to support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Document Privacy

Your documents are private by default. We do not access, read, or analyze the content of your documents except as necessary to provide the Service (e.g., rendering PDFs, extracting form fields). Documents are encrypted at rest and in transit. We never share your documents with third parties except as directed by you (e.g., sending to recipients for signature).

5. Data Sharing

We do not sell your personal information. We may share information with:

• Service providers: Cloud infrastructure (Railway), email delivery (SendGrid), file storage (Cloudflare R2), and payment processing (Stripe) — solely to operate the Service
• Document recipients: When you send a document for signature, recipients receive access to the document and can see sender information
• Legal requirements: When required by law, subpoena, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

• TLS encryption for all data in transit
• Encryption at rest for stored documents
• Hashed and salted password storage (bcrypt)
• HMAC-SHA256 signed document access tokens
• Rate limiting and abuse prevention
• Regular security audits

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Audit trail data is retained for the duration required by applicable law (typically 5–7 years for electronic signature records). Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent for data processing

To exercise these rights, contact us at privacy@linkfeather.com.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. Session cookies are encrypted and expire when you close your browser or after a set period of inactivity.

10. Third-Party Authentication

If you sign in with Google, we receive your name, email address, and profile picture from Google. We use this information solely to create or link your account. We do not access your Google Drive, contacts, or other Google services.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

12. International Transfers

Your information may be processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

14. Contact

For questions or concerns about this Privacy Policy, contact us at privacy@linkfeather.com.