What we keep
- People: email address and name.
- Sign-in: one-time codes, stored only as a keyed hash, and your signed-in devices, named by browser and system (for example “Safari on iPhone”).
- Rooms: lines, their history, invites, and requests for confirmation.
- NDA signatures: the exact text signed, the typed name, the email, the time, and the IP address and browser, kept only as evidence of the signature.
- Questions and replies: each question, the Reference’s address and name, and the full reply message as received, kept as proof.
- Billing: a record of charges and seats. Card details are handled by Stripe and never reach us.
What we don’t do
- No tracking pixels, fingerprinting, IP-to-company lookups or third-party analytics.
- No read receipts and no open tracking on emails. We don’t record who opened what or for how long.
- No data shared with any other product or company, beyond the service providers below.
Who sees what
An Owner sees their own rooms in full. A Recipient sees the rooms they signed into; they see a Reference’s domain, not their address. A Reference sees only the lines whose questions came to them.
Service providers
- Cloudflare: hosting, database and storage.
- Resend: sending and receiving email.
- Stripe: payments.
Our typefaces are served from our own domain, so no page asks a third party for anything.
How long we keep it
A line’s history and the replies behind it are kept for the life of the room, because the record is evidence. Ask us to close your account and we will remove what isn’t part of a room’s record.
Contact
Last updated November 2026.