Privacy Policy

The short version

Your documents stay in your account. We encrypt them in transit and at rest. We do not read your documents. We do not sell your data.

What we store

• Uploaded documents — stored encrypted on our servers, accessible only via the unique signing token or your authenticated dashboard session.
• Signed PDFs — retained so both parties can download them. Deletion available on request.
• Audit logs — timestamps of document views and signatures, plus IP addresses and device details of signers. Retained as part of the signing record — they are what makes the Certificate of Completion trustworthy.
• Email addresses — used to send signing invitations and notifications. Not shared with third parties.

Encryption

All data is encrypted in transit using TLS. Documents and signed PDFs are encrypted at rest with AES-256-GCM; the encryption key lives outside the document store, and files are additionally stored with restricted permissions on isolated server storage. Signing links use single-use tokens stored only in hashed form, so access requires a valid signing link or an authenticated session.

We do not read your documents

MaxSign processes your document to render a preview, place signature fields, and stamp signatures onto the final PDF. This is automated. No human at Max AI reads your documents.

Third-party services

MaxSign uses Microsoft Azure to send notification emails on your behalf. Your email address is passed to Microsoft only for the purpose of delivering these notifications, subject to Microsoft's privacy policy.

Your rights

You may request deletion of your documents and account data at any time by emailing [email protected]. We will respond within 5 business days.

Contact

Questions about this policy: [email protected]

Max AI, Inc. • Austin, TX