Privacy Policy
Last updated: 1 September 2026
Controller and contact
Flushnet operates Flushnet Document Sign and acts as controller for account, service, security and billing data. Privacy contact: info@flushnet.com. For business customers processing third-party document content, data-protection roles may also be governed by the applicable service agreement or data-processing agreement.
Sources and data we process
Most data comes directly from you. If you choose Google sign-in, basic account data comes from Google. Payment status and references may come from the selected payment provider. We may process your email address and authentication data, Google account identifier and basic profile data when Google sign-in is used, documents you upload or capture, text/date/signature-placement drafts you add while filling documents, saved handwritten signature images, certificate metadata and encrypted private-key material when you choose Add your certificate, signed-document records and hashes, usage counters, subscription and payment references, security/audit events, privacy requests, and technical data needed to keep the service secure. A handwritten signature image is used to render your signature and is not used by us for biometric identification.
Purposes and legal bases
Account creation, authentication, document capture, signing, storage, verification, subscription management and requested certificate use are processed to provide the service you request and perform the contract. Security, abuse prevention, service integrity and proportionate audit logging are processed for our legitimate interests in protecting users and the service. Accounting, regulatory and legally required records may be processed to comply with legal obligations. Where consent is specifically requested for an optional activity, you may withdraw it for future processing.
Documents and special-category data
Documents may contain personal or sensitive information chosen by you. Upload only information you are authorised to process. Where Flushnet acts as controller and special-category data is intentionally processed, an applicable GDPR Article 9 condition is required. We do not use document contents for advertising and do not sell personal information.
Required data
Account/authentication data and the document data needed for a requested signing operation are necessary to provide those features. If you do not provide them, the related account or signing feature cannot operate. Optional Google sign-in, saved signature and customer certificate features are not required to use every part of the service.
Recipients and service providers
Service providers may include our hosting/infrastructure provider, Google for optional sign-in, and PayPal or Stripe when their payment service is used. They receive only the data needed for their role. Additional processors or subprocessors must be assessed and contractually governed before being used for production personal data.
International transfers
If personal data is transferred outside the EEA, a lawful GDPR Chapter V transfer mechanism must apply, such as an adequacy decision or appropriate safeguards. Information about the applicable mechanism can be requested through the privacy contact.
Document storage mode
The document-library feature may be enabled or disabled by the service. While it is disabled, newly uploaded documents are retained only temporarily to complete preview, signing and download and are not added to the persistent Documents library. Temporary signing documents are deleted after the signed PDF is downloaded and abandoned temporary documents are automatically removed after a limited technical window. Documents stored before the feature was disabled are not automatically deleted and remain subject to the controls and retention terms below.
Retention
Documents and saved signatures are retained while you keep them in the service and are removed when you delete them or delete your account, subject to limited lawful exceptions. One-time app login tokens expire after about three minutes and expired token records are periodically removed. Temporary verification, cache and signing work files are periodically cleaned. Certificate credentials remain until you remove them or delete the account. Subscription, transaction, security, audit and compliance records are retained only for the period needed for their stated purpose or applicable legal requirements, then deleted or anonymised where feasible.
Security
We use HTTPS, authenticated access, CSRF protection, secure session-cookie settings, access-controlled server storage, restrictive file permissions, encrypted storage for imported certificate private keys, integrity hashes, security logging and periodic cleanup/testing. Security measures are reviewed according to risk. Hosting-level backup, resilience and physical storage controls are also dependent on the infrastructure provider.
Cookies
The Document Sign app uses essential session/authentication cookies required for login and security. The app does not require advertising cookies to provide the signing service.
Your GDPR rights
Subject to the conditions in applicable law, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent without affecting earlier lawful processing. You may also lodge a complaint with the competent supervisory authority. Requests are normally handled within the GDPR time limits.
Automated decisions
Document Sign does not use your personal data for solely automated decisions producing legal or similarly significant effects and does not use document contents for advertising profiling.
Your controls
Privacy Center lets signed-in users download account data, submit privacy requests and delete their account. You can also delete individual documents from the document library and remove an added certificate from your account.
Changes
Material changes to this notice will be dated here and, where required, communicated through the service.