Privacy Policy

Last updated: August 29, 2026

ClassicSign ("we", "us") is an electronic-signature service operated by Classic Rent Solutions, East Cleveland, Ohio. This policy explains what information we handle when you sign, send, receive, download, or verify a document through classicsign.ai or an affiliated origin, and what we do — and deliberately do not do — with it.

The short version: we collect only what an electronic signature legally requires, we use it only to execute and prove your agreement, we never sell it, and your executed documents are stored in private, access-controlled storage — never on the public web.

1. Information we collect

Identity you provide: your name, email address, and phone number as entered by the document sender, and the full legal name you type when adopting a signature.
Your signature: the drawn or typed signature and initials images you adopt, which are embedded into the document you sign.
Document contents: the agreements uploaded by senders and the values you enter into their fields (dates, text, names).
Signing evidence: your IP address, browser/device identifier (user agent), timestamps, and your electronic-consent acknowledgment. United States law (E-SIGN Act, UETA) requires signatures to be attributable — this evidence is how yours is.
Audit events: a record of each document being created, sent, viewed, signed, completed, declined, downloaded, or sealed.

We do not ask signers for passwords, government ID numbers, or payment information, and the signing page sets no advertising cookies and runs no trackers or analytics scripts.

2. How we use it

To present documents for signature and route them between the parties, in order.
To produce the executed record: your signature and entries are flattened into the PDF, fingerprinted (SHA-256), digitally sealed, and timestamped.
To notify parties — "your turn to sign," executed-copy delivery, and sender alerts.
To maintain the audit trail that makes the signature legally defensible.
To operate, secure, and rate-limit the service against abuse.

We do not sell personal information, we do not use it for advertising, and we do not use your documents to train anything.

3. Who can see your information

The parties to your document. Everyone signing (and the sender) receives the executed document, which contains the signatures and field entries of all parties.
Our service providers, only as needed to deliver the service: cloud database and document storage, email delivery, and SMS/WhatsApp delivery when the sender chooses those channels. Each receives only what the delivery requires.
Anyone holding a verify link can see a document's title, completion date, signer names, and hash status on the public verification page — never the document contents. Verify links contain an unguessable document identifier.
Law and safety: we may disclose information if required by law, subpoena, or to protect the integrity of the service.

4. Security

Documents live in a private storage bucket with no public or anonymous access; downloads use short-lived signed URLs issued only to valid signer tokens.
Signing links use unguessable 122-bit random tokens; access is rate-limited, and each request is validated server-side.
All traffic is encrypted in transit (TLS, HSTS); data is encrypted at rest by our storage provider.
Executed documents are fingerprinted with SHA-256 and carry a PAdES digital seal with an RFC 3161 trusted timestamp, so any later alteration is detectable by anyone.

5. Retention

Executed documents, their signing evidence, and audit trails are retained for as long as the agreement and applicable law require — an executed contract is a legal record, and deleting it would defeat the purpose of signing it. Unsigned envelopes expire and become inaccessible after their signing window (typically 30 days). If you want an unsigned envelope voided sooner, ask the sender or contact us.

6. Your choices and rights

You may decline to sign any document — the sender is notified and the envelope closes.
You may request a copy of the evidence we hold about your signature on a document you are party to.
You may ask us to correct inaccurate contact details or delete personal information that is not part of a legally retained executed record.

7. Children

ClassicSign is not directed to children under 16, and we do not knowingly collect their information. Contracts require legal capacity to sign.

8. Changes

If this policy changes materially, we will update this page and its "last updated" date. Continued use of the service after a change constitutes acceptance.