Privacy Policy

Last updated 12 November 2026. This document is a template that has not yet been reviewed by a lawyer.

This policy explains how Jason Lloyd Law (sole trader) ("md2sign", "we") handles personal information. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What we collect

• Account holders: name, email, company name, password hash, API keys (stored hashed), subscription status and usage. Payment details are collected by Paddle, not by us.
• Documents: the markdown you send, including any personal information it contains, plus the names and email addresses of recipients.
• Signing evidence: when a recipient views, signs or declines: their typed name, timestamps, IP address, browser user agent and the consent they gave.
• Website visits: to count visitors we record, per day, a one-way code made from your IP address and browser type, the page you arrived on and the site that referred you. We don't use analytics cookies or third-party trackers, we don't store your IP address for this, and the code changes every month so visits can't be linked across months. We delete these records after 13 months.

Why we collect it

To provide the Service, deliver signature emails, create tamper-evident audit records that let parties prove what was signed, bill subscriptions, prevent abuse, and meet legal obligations.

Who we share it with

Recipients of a document can see its contents and the other signers' names. The public verification page shows signer names and partly hidden email addresses. Our service providers are Laravel Cloud (hosting), Resend (email delivery) and Paddle (payments). They may process data outside Australia, including in the United States. We don't sell personal information.

Retention

We keep documents and audit trails while your account is active and for up to 7 years afterwards so signatures stay verifiable, unless you ask us to delete them sooner and the law allows it.

Your rights

You can ask to access or correct your personal information, or complain about how we handle it, by emailing [email protected]. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).