Privacy policy

Files you edit

When you open, edit or download a PDF, the file is sent to our server to be processed (for example to check its password, shape Thai text and build the result) and is not kept.

Files are stored in two cases. When you save one as a project or form template, it's kept privately in your account until you delete it. When you use Decipher or convert a PDF (to Word, Excel or EPUB), the file and its result are kept privately for about 24 hours so you can download the result, then deleted. PDF passwords are never stored.

We keep encrypted backups of our database and of saved projects and templates for 35 days, to recover from a failure. Something you delete can stay in a backup until that backup expires. Temporary Decipher and conversion files aren't backed up, except that backups made before 6 November 2026 may still hold them until they expire, by 11 December 2026.

Administrators don't open your files; they see only how many you have saved and how large they are.

Account and usage data

Your email address, how you sign in (email and password, or Google) and your chosen language. Passwords are handled by our authentication provider and never stored in readable form.

Your plan, payment status and your downloads (type and time), to apply your plan's limits, and the tools you mark as favorites.

If you take part in the community, your username and its change history, picture, bio, points, tier, badges, posts and replies are public and may appear in search results. Your e-mail and billing details are never shown. Every account starts with a random 7-digit username, which you can replace with your own; if staff remove a name that breaks the rules, it goes back to a new random number. You can sign in with your username or your e-mail. We keep this until you delete it or your account is deleted, and keep point history, reports and moderators' decisions to keep the community safe.

Private messages in the community are seen only by you and the other person. The team reads a conversation only if one of you reports it, and each time it does so is recorded. Messages are kept until your account or the other person's is deleted; deleting a conversation only hides it from your own list.

When you cancel your subscription, any reason and comment you choose to give, to improve the service, kept until the account is deleted. We also e-mail you a confirmation of the cancellation.

Signatures Pro members save are stored privately in their account (delete them any time); editor preferences are kept in your browser only.

Security records

To prevent misuse, government documents in particular, we record security events: documents created, saved, downloaded and deleted; your confirmation that a government document is for a government agency (with the version of the terms you confirmed); and requests that were refused or rate-limited.

Each record holds your account, the time, the document type, reference ids, a digital fingerprint (SHA-256) of the file made, your IP address and your browser's identification (user agent). Never document contents, passwords or sign-in tokens. A created government document carries its document id in the file's properties, so it can be traced to its record.

Automated checks flag unusual patterns for an administrator to review. A flag doesn't mean you did anything wrong, and never suspends an account by itself. Only administrators (who sign in with a second step) can see these records, and every look is itself logged.

Website and service statistics

Website visits: we use Cloudflare Web Analytics, which sets no cookies and doesn't identify you or follow you across sites. It gives us totals only: visitors, pages viewed, the sites that sent you, your country and your type of device, browser and operating system. It runs on the website and the sign-in and sign-up pages only, never where you work on your documents.

Service usage: when you're signed in, we record which features you use and when (for example opening the editor, finding a template's fields, downloading, or starting a payment), with your account id, plan and type of device, to improve the service. Never file names, document contents, what you type into forms, your email address or your IP address.

Where you came from: on your first visit, your browser notes in its own storage (not a cookie) whether you came from Google search, another website or directly, and the first page you opened; if the link carried campaign tags (UTM, such as utm_source=facebook), those tags and the sending site's name (its domain only) too. It also notes your latest visit from a campaign or another website. Campaign and referral visits are counted anonymously (no account, visitor id or IP address). If you create an account within 7 days, your first source is saved with it, and your latest source is saved when you sign in or pay, so we know which campaigns bring members and purchases. When you buy, these sources and any promotion code you used are kept with the purchase. Never the full address of the page that sent you, nor what you searched for. If your browser sends Global Privacy Control or Do Not Track, only the channel and first page are noted, as before, and no campaign data is kept or sent.

Search statistics: we use Google Search Console, which gives us totals of how often our pages appear and are clicked in Google's results; nothing that identifies anyone.

Administrators see only totals. We never record your screen or your typing.

Payments

Payments are processed by Stripe. We never see or store your card number; we receive only the status of your payments and subscription.

Sending documents for signature (E-Sign)

When a member sends a document for others to sign, we keep the original and signed documents; the signers' names, e-mail addresses and roles as the sender entered them; what signers fill in and the signatures they add; and an event log (when the link was opened, the code confirmed, consent given, and the document signed or declined, with browser details and the IP address as a one-way hash), to provide the service and as evidence of the signing.

The sender decides which documents to send and to whom. Signers who want to exercise their rights over data in a document should contact the sender, or us. Free senders' original and signed files are kept for 30 days after the request ends; Pro senders' until the sender deletes them. The rest (including the event log and SHA-256 values) is kept while the sender's account exists and deleted with it, apart from encrypted backups, which expire on their schedule.

Services we use

Supabase (database, authentication and file storage), Stripe (payments), Google (sign-in, if you choose it), Cloudflare (DNS, the Turnstile security check on the e-mail sign-in forms, which keeps bots out, and anonymous visit statistics), Google Search Console (search statistics, as totals), Resend (sending e-mail), GitHub (running backup jobs), Cloudflare R2 (storing encrypted backups) and our server hosting provider. These providers may process data outside Thailand.

Cookies

We use only what's necessary: a language cookie and your sign-in session stored in your browser. Visit statistics use no cookies. No advertising or third-party tracking cookies.

How long we keep data

Account data until you ask us to delete your account; projects and templates until you delete them; payment records for as long as the law requires.

Raw payment event data from Stripe for 90 days. File names of Decipher and conversion jobs for 30 days after their files are deleted.

Service usage records for 13 months, then only daily totals not tied to any account. They're deleted with your account. Your first source is kept with your account and deleted with it.

Security records: full IP addresses for 30 days, then only their network part; browser identification for 90 days; security events for 12 months; government-document confirmations for 2 years. When an account is deleted these records are no longer tied to the account or its email (only a coded reference, a keyed hash, remains) and are deleted on the schedule above.

Your rights

You may ask to access, correct, receive a copy of, object to the use of, or delete your personal data, and you may complain to Thailand's Personal Data Protection Committee. Contact us at the email address in the site footer.