Privacy policy

Account data: your email address, your name if you give it, and your plan and billing status.

Document data: the agreements you create — the prompt you wrote, the clauses, party details, and the signatures applied to them.

Audit data: for each signature and key action, the actor's email, IP address, browser user-agent, timestamp and document version. This exists specifically so an agreement can be relied on later, and it is bound into the executed PDF.

Operational data: server logs and error reports, which we keep briefly to keep the service working.

We do not train AI models on your contracts.

We do not sell, rent or share your data with advertisers or data brokers.

We do not read your agreements except where you explicitly ask us to — for example, when you purchase Legal Review.

MongoDB Atlas stores the database, including documents and audit records.

OpenAI processes the text you submit for drafting and clause rewrites. Content sent through the API is not used to train their models.

Resend delivers email — sign-in links, signature requests, and executed copies.

Paystack processes payments. Card details go directly to Paystack; they never reach our servers.

Each of these processes data only to provide the function it is there for.

When you send an agreement, the recipient's name and email are stored so we can deliver their private signing link and record their response. They do not need an Adehun account.

Their signature, IP address, device and timestamps are recorded for the audit trail, and they are told so on the signing page before they sign.

Sign-in links and signing links are single-use where they can be, and only their SHA-256 digests are stored — a database leak does not hand anyone a working link.

Sessions are signed JWTs in httpOnly cookies. There are no passwords to steal because we do not use them.

Executed PDFs are hashed with SHA-256 and stored alongside their hash, so any later tampering with the file is detectable.

We keep your agreements for as long as your account exists, because that is the point of them. Audit records are retained alongside the agreement they belong to.

You can export any agreement as a PDF at any time, and you can request full deletion of your account and its contents by email. We action deletion requests within seven days, except where we are legally required to retain a record.

To exercise any of this, or to ask what we hold about you, write to hello@adehun.com.