This policy explains what Lifted Sign collects, why, how we protect it, and the choices you have. Lifted Sign is an electronic-signature service operated by Lifted Holdings. We keep this plain because a signature is a serious thing — and so is your data.
01 What we collect
We collect only what we need to run the signing service. That falls into a few clear buckets:
Account information
Your email and name, so we can create your account, address your envelopes, and reach you about documents you send or receive.
Authentication data — you sign in with Google or with an email and password. If you enable it, we also store a phone number for optional SMS two-factor authentication.
Documents you upload
The PDFs and files you upload to send for signature, the fields you place on them, and the finished, executed documents.
Signer records
To make an electronic signature enforceable, each envelope carries an audit trail. For every signer we record:
Name and email address of the signer.
IP address and timestamps for key events — when the document was opened, consented to, and signed.
ESIGN / UETA consent records — proof that each signer agreed to sign electronically before the first field was completed.
We do not collect payment card details during beta. Lifted Sign is free with no card required. If we introduce paid plans in the future, any billing information would be handled by a payment processor — never stored on our servers in full.
02 How we use it
We use the information above strictly to deliver and protect the signing service:
Deliver the service — build and route your envelopes, present the signing experience to each party, and return the finished document.
Seal and certify — freeze each completed document, apply an AES-256 / PAdES seal, and generate a Certificate of Completion with a SHA-256 fingerprint and the full audit trail.
Security and integrity — verify identity at sign-in, detect abuse, and keep a tamper-evident record of what was signed and by whom.
Communicate with you — send signing requests, completion notices, and essential account or service messages.
We do not sell your personal information, and we do not use your documents to train advertising or unrelated machine-learning models.
03 Sharing & subprocessors
Your documents are private to you and the people you send them to. We share information only in these limited ways:
With the signers you choose. Each party you add to an envelope can view the document they are asked to sign and the record of who has signed it.
With service providers (subprocessors) that help us run the platform, listed below. They may only process data on our instructions and to provide their service.
When legally required — to comply with a valid legal request, or to protect the rights, safety, and integrity of our users and the service.
We do not sell, rent, or trade your personal data to anyone.
Subprocessors we rely on
Google (sign-in)
Authenticates accounts that choose "Sign in with Google."
Twilio (SMS)
Delivers optional SMS two-factor authentication codes, only if you enable it.
Cloud hosting
Runs the servers and encrypted storage that hold your account, documents, and records.
04 Data retention
We keep your account information and documents for as long as your account is active, so your signed records stay available to you. Executed documents and their Certificates of Completion are retained as part of the durable, tamper-evident record of an agreement.
When you delete a document or close your account, we remove the associated data from our active systems. Residual copies may persist briefly in encrypted backups before they age out on our normal backup cycle, and we may retain limited records where the law requires it.
05 Security
Protecting signed records is the core of what we do.
Encryption in transit — all traffic to Lifted Sign is served over TLS.
Encryption at rest — documents and signatures are encrypted in storage.
Tamper-evident seal — when the last field is signed, the document is frozen, AES-256 / PAdES sealed, and fingerprinted with a SHA-256 hash recorded on the Certificate of Completion. Alter one byte and the fingerprint no longer matches — proof the record is exactly what everyone agreed to.
Access controls — sign-in via Google or email and password, with optional SMS two-factor authentication.
No online service can promise perfect security, and we don't. What we promise is honest engineering: encryption in transit and at rest, a tamper-evident seal, and no fabricated certifications we don't hold.
06 Your rights & choices
You control your data in Lifted Sign:
Access — view your account details, documents, and audit records from within the app.
Delete — delete documents, or request account deletion, directly through the app.
Correct — update your name, email, and authentication settings in your account.
Depending on where you live, you may have additional rights over your personal data under applicable law. To exercise any of them, use the delete and account controls in the app, or reach us through the support option inside Lifted Sign.
07 Cookies & sessions
Lifted Sign uses cookies only to keep you signed in and to secure your session. These are strictly functional — they are not used for advertising, cross-site tracking, or profiling. If you block them, the sign-in and signing flows may not work.
08 Children
Lifted Sign is a tool for legally binding agreements and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a minor has used the service, contact us and we will remove the data.
09 Changes to this policy
We may update this policy as the service evolves. When we make a material change, we'll update the "Last updated" date above and, where appropriate, notify you. Continuing to use Lifted Sign after an update means you accept the revised policy.
10 Contact
Lifted Sign is operated by Lifted Holdings. If you have a question about this policy or your data, reach us through the support option inside the app. You can also review our Terms of Service.