Privacy Policy

Last Updated: October 10, 2026

Privacy Policy

At SealItDone, operated by Hristov Development Co ("Company," "we," "us," or "our"), we believe in frictionless trust. We offer a pay-per-use electronic signature platform without the bloated subscriptions, and we apply that same straightforward approach to your privacy.

This Privacy Policy explains how we collect, use, and protect your information when you use the SealItDone website (sealitdone.io) and application (app.sealitdone.io) (together, the "Service").

1. What We Collect

To provide legally binding electronic signatures, we must collect specific information. We only collect what is strictly necessary to execute your document, verify your identity, and process your payment.

Account & Identity Information

Your name, email address, and authentication credentials when you create a workspace or are invited to sign a document. If you sign in with Google, we receive your name and email address from your Google account; we never receive your Google password.

Document Content

The actual PDF documents you upload and the signatures created. These remain your property; we securely host them to facilitate the signing process and generate the final sealed file.

Cryptographic Audit Data

To comply with the ESIGN Act and UETA, we collect technical metadata during the signing process. This includes your IP address, browser type (User-Agent), operating system, and precise timestamps of when a document was viewed, signed, and completed.

Payment Information

We charge a flat fee of $2.99 USD per document execution. We use a secure, PCI-compliant third-party processor (Stripe) to handle payments. We do not process, capture, or store your raw credit card information on our servers.

Website Usage Data

When you visit our website, we use Google Analytics (loaded through Google Tag Manager) to understand how visitors find and use the site. This collects information such as the pages you view, how you arrived (for example, a search engine or a link), approximate location derived from your IP address, device and browser type, and the date and time of your visit. We also use Ahrefs Web Analytics, which counts visits and page views without cookies and without collecting personal data. Our hosting provider also keeps standard server logs (including IP addresses) for security and reliability. See Section 6 for details and how to opt out.

2. How We Use Your Information

Our primary use of your data is to fulfill our contract with you: delivering a legally binding e-signature utility. We use your information to:

• Facilitate the routing and delivery of signature requests to the correct parties.
• Generate the tamper-evident Cryptographic Audit Trail required for legal validity.
• Process your $2.99 micro-transactions.
• Send you critical transactional emails (e.g., "It's your turn to sign," or "Your document is complete").
• Maintain the security, stability, and performance of our infrastructure.
• Measure and improve our website, for example by seeing which pages are useful to visitors.

3. Legal Bases for Processing (EEA, UK and Switzerland)

If you are located in the European Economic Area, the United Kingdom or Switzerland, we process your personal data on the following legal bases:

• Performance of a contract: to provide the Service you request, including routing documents, generating the audit trail, and processing payments.
• Legal obligation: to keep records required by law, including the audit trail where it is needed to evidence a signed agreement.
• Legitimate interests: to secure and improve the Service and our website, and to protect the legal interests of the parties to a signed document.
• Consent: where we ask for it. You may withdraw consent at any time.

4. The Cryptographic Audit Trail (Important Disclosure)

Because the core value of SealItDone is providing legally binding signatures, certain metadata collected during the signing process is permanently embedded into the document's Cryptographic Audit Trail.

When you sign a document on SealItDone, your Name, Email Address, IP Address, and timestamp data will be visibly appended to the final executed PDF. This audit trail is shared with the document sender and all other signers of that specific document to prove the signature's validity. By using SealItDone to sign a document, you explicitly consent to this data being shared with the other parties involved in the transaction.

5. Who We Share Data With

We do not sell your personal data. We only share information with trusted third-party service providers acting on our behalf to operate the platform:

• Cloud Infrastructure: We use Google Cloud Platform (including Firebase) to securely host the website, application, database, and encrypted document storage.
• Authentication: If you choose Google Sign-in, Google authenticates you on our behalf.
• Payment Processing: We use Stripe to securely process your one-time transaction fees.
• Email Delivery: We use secure email infrastructure providers (e.g., Resend) to deliver transactional notifications.
• Website Analytics: We use Google Analytics and Google Tag Manager, provided by Google LLC, to measure website usage. Google processes this data under its own privacy policy:policies.google.com/privacy. We also use Ahrefs Web Analytics, provided by Ahrefs Pte. Ltd. (Singapore), for cookie-free visit statistics; seeahrefs.com/legal/privacy-policy.
• Legal Compliance: We may disclose your information if required to do so by law, court order, or subpoena, or to protect the rights, property, or safety of SealItDone, our users, or others.

6. Cookies and Analytics

Our website uses a small number of cookies, all set by Google Analytics: _ga and_ga_<ID>, which distinguish visitors and sessions and last up to two years. They do not identify you by name. The application also uses strictly necessary browser storage to keep you signed in; the Service cannot work without it.

We also use Ahrefs Web Analytics, which sets no cookies and collects no personal data. It counts visits per device, per website and per day only, so it cannot follow you across devices or other websites.

You can limit analytics at any time:

• Block or delete cookies in your browser settings.
• Use a content or script blocker to stop the analytics scripts from loading.
• Install the Google Analytics Opt-out Browser Add-on:tools.google.com/dlpage/gaoptout.

Google Analytics, as a third party, may collect information about your online activities over time and across different websites. Our website does not currently respond to browser "Do Not Track" signals; the options above are the way to opt out of analytics.

7. Data Security and Retention

We take data security seriously. We use industry-standard security measures, including AES-256 encryption for documents at rest and TLS for data in transit. Every finalized document is sealed with a digital certificate to prevent tampering.

Data Retention: We do not retain the executed PDF, we only retain its associated audit trail to allow you and your signers to access the validation criteria of the finalized agreement. The finalized and sealed PDF is distributed to all participants as an attachment in an email, and is eliminated from our servers. However, SealItDone is not designed to be a permanent digital vault. Users are responsible for downloading and retaining their own copies of executed documents. We reserve the right to delete accounts and associated document data after prolonged periods of inactivity, in accordance with our internal data retention policies.

Website analytics data is kept in Google Analytics for no longer than 14 months and is then deleted automatically.

8. International Data Transfers

SealItDone is operated from the United States, and our service providers may process data in the United States and other countries. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses offered by our service providers.

9. Important: Highly Sensitive Data

SealItDone is intended for standard business and freelance agreements. Users should not upload documents containing highly regulated, sensitive categories of data (e.g., HIPAA-protected health records, unredacted Social Security Numbers, or raw biometric data) within the body of the PDF, as the platform is not audited for specialized regulatory frameworks like HIPAA.

Please do not upload documents containing highly sensitive categories of data (e.g., medical records, protected health information, or highly confidential government secrets) unless strictly necessary for your e-signature needs.

10. Your Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal data. Because we do not require subscriptions, you can request the deletion of your workspace at any time. Please note that if you have executed a legally binding document, we may be required to retain the transaction's audit log to protect the legal interests of the other signing parties.

If you are in the EEA, the UK or Switzerland, you also have the right to receive your data in a portable format, to object to or restrict certain processing, to withdraw consent at any time (without affecting processing carried out before you withdrew it), and to lodge a complaint with your local data protection authority.

If you are a California resident, you may request to know what personal information we have collected about you and ask us to correct or delete it, and we will not discriminate against you for exercising these rights. We do not sell your personal information.

To submit a data request, please contact us at the email below. We will respond within the time required by applicable law, and may need to verify your identity before acting on a request.

11. Children's Privacy

The Service is not directed to children. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this policy as we grow. When we do, we will post the updated version on this page and change the "Last Updated" date above. If we make material changes, we will make reasonable efforts to notify account holders, for example by email or a notice in the application.

13. Contact Information

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

Email: contact@sealitdone.io

Privacy requests: privacy@sealitdone.io

Company: Hristov Development Co.

Address: 205 N Michigan Ave, Suite 810, Chicago, IL, 60601, United States of America