Privacy notice
Documents carry trust. The data path should be equally clear.
This notice explains BL Sign’s handling of sender accounts, signer details, uploaded PDFs, signatures, delivery, audit records, and public verification.
Effective September 13, 2026
Information BL Sign processes
Sender setup collects name, email address, IP address, and a secure account token. Creating and sending an envelope can collect its title, PDF contents, signer and copy-recipient names and emails, signing order, field locations and values, expiration, delivery state, and sender instructions. Signing can collect consent version and timestamp, typed or drawn signatures and initials, field responses, email-verification state, IP address, browser or device user agent, access and signing timestamps, event details, and cryptographic hashes of original and completed files.
Storage and public verification
Envelope metadata, participants, fields, and audit events are stored in Cloudflare D1. Original, signature-image, and completed PDF objects are stored in Cloudflare R2. Secure, recipient-specific links control signing and completed-file access. A hard-to-guess public verification address printed on the completed PDF displays the envelope title, status, dates, signer names and states, signing timestamps, and document hashes. Do not use a document title that exposes confidential information. Anyone with that verification address can view its verification record.
Use and disclosure
BL Sign uses this information to create and route envelopes, verify recipients, capture intent and consent, render signed documents and completion certificates, deliver email, prevent abuse, provide support, and maintain integrity evidence. Cloudflare supplies compute, database, object storage, security, and email-delivery infrastructure. Information is also disclosed when directed by the sender or signer, required by law, needed to protect the service and its users, or part of a legitimate business transaction. BL Sign does not sell personal information or use document data for targeted advertising.
Retention and deletion
Envelope records and documents are retained to provide recipient access and integrity evidence while the service operates or until an authorized deletion is completed, subject to security, transaction, dispute, backup, and legal obligations. To prevent repeated sending after deletion, separate usage reservations retain keyed pseudonyms for network, sender, and recipient, the action type, and its time. These contain no documents or message contents, survive account or envelope deletion, and expire after two days plus the hourly cleanup interval. Email-verification codes expire after 10 minutes; authenticated signer sessions expire after 12 hours. An envelope’s signing expiration stops new signing but does not itself erase its evidence record. From “My envelopes,” senders can permanently delete one envelope and its PDFs, signature images, participants, fields, audit events, hashes, and public verification record, or delete every envelope, template, and the sender account. A signer or other authorized person may request deletion or correction at the contact below. We verify authority before changing signing evidence and may retain a minimal record when law or dispute integrity requires it.
Regulated health information
The public BL Sign service is not offered for a HIPAA covered entity or business associate to create, receive, maintain, or transmit protected health information. No Business Associate Agreement applies to the free public service. Do not upload PHI. A healthcare organization must complete a separate compliance review, confirm the parties’ HIPAA roles and safeguards, and execute any required written Business Associate Agreement before using a specifically approved service for PHI.
Your choices and security
You may request access, correction, export, or deletion of personal information tied to you. Senders control their envelope recipients and content; signers can decline rather than sign. BL Sign uses encryption in transit, access tokens, recipient email verification, signed secure cookies, rate limits, audit logging, content hashes, and provider controls. No service removes all risk, so avoid uploading information that is not needed for the agreement.
Operator, contact, and changes
BL Sign is operated by Michael Barber under BlackLabel Tech. Email michael@blacklabelbots.com with “BL Sign privacy request,” your role, and the envelope ID if available. Do not attach a sensitive document to the first message. Material changes appear here with a new effective date. BlackLabel Tech’s company privacy baseline is at blacklabeltec.com/privacy.
Public-page analytics
We use PostHog to measure visits to public marketing pages. A random identifier is stored in this browser (local storage and a first-party cookie) so repeat visits link to one anonymous PostHog visitor profile. On public pages PostHog records page views, clicks and other page interactions, session replays of page layout, scrolling and clicks with every form field masked, heatmaps, clicks that had no effect, browser errors and console messages, and page-load timing. Page addresses are sent without query strings. Envelopes, signing pages, documents, studios, account, sign-in and checkout pages load none of this. PostHog receives the network request and keeps an anonymous visitor profile for that identifier; IP-based geolocation is disabled; PostHog shows no surveys here. Global Privacy Control, Do Not Track, and the browser opt-out disable public-page measurement.