Your documents are yours. You can take a complete copy at any time, and you can close the account yourself without asking anyone. This page explains both, and exactly what is left behind afterwards.
Take a copy: the account export
Settings → Export builds one zip holding everything in
the account: every template with the files you uploaded, every completed
signed document, the files and signature images your signers sent, the audit
trail PDF for each document, a record of each document in JSON and one CSV
covering them all — plus a manifest.json listing every
file with its size and SHA-256 checksum, so you can prove nothing was altered
on the way to you. If anything could not be included, the manifest names it
and says why.
- Ask for the export and close the page. It is built in the background.
- We email you when it is ready; the email links to the page, never to the file, so signing in is always required.
- Press Download. The link it makes lasts 10 minutes, and a fresh one is made each time you press it.
The file itself is kept for 7 days and then deleted; ask for another whenever you like, up to 5 a day. Exports work on the free plan, on a suspended account and on an account already scheduled for deletion. That is the point of them.
Deleting your account
Deleting is a 90-day decision, not a button that empties a database.
- An administrator opens Settings → Account, presses Delete my account and confirms.
- Straight away the subscription is cancelled — you are not charged again — and the account becomes read-only. Everyone can still sign in, read, download and export.
- Every administrator is emailed the exact date, and a reminder goes out 7 days before it.
- On that date, 90 days later, everything is permanently destroyed.
- Any administrator can press Cancel deletion at any point before then. Nothing was lost, so nothing has to be restored.
Your email addresses stay reserved for you until the purge, so nobody else can register them in the meantime.
Accounts nobody uses
An account nobody has used for 1 year is deleted too, with warning emails 60, 30, and 7 days beforehand to everybody in it. Simply using the account resets the whole clock. An account with paid access is never treated as dormant, and an account that used to pay keeps everything for at least 1 year after the subscription ended, whatever the dates say.
What survives a permanent deletion
- The verification record of each signed PDF — a fingerprint, a completion date and a signer count. It names nobody, and without it every document you ever signed would stop verifying for the people holding it.
- The subscription and payment history, with the person scrubbed out of it: ids, amounts and dates stay, names and addresses do not.
- A stub of the account row, renamed, so those records point at something rather than nowhere.
- Our own log of support access to the account.
Everything else is destroyed. The same list, with the evidence behind it, is on our trust page; the formal wording is in the Privacy Policy. See also Verify a signed document.