Privacy Policy

BusinessDocs is operated by Revscale Technologies, Inc. ("Revscale"), Fort Lauderdale, Florida, United States. Revscale is the controller of the personal data described here. Where you enter another person's details, such as a counterparty or a signer, you are responsible for having a lawful basis to share them with us, and we process them on your behalf to deliver the document.

• Account data: name, email address, job title, timezone, authentication identifiers.
• Business profile: entity name and type, formation state, industry, addresses, contact details, workforce information, signing officer, and stated priorities.
• Documents you create, including every answer you give in the questionnaires and the rendered document body.
• Signature data: signer names and email addresses, consent records, timestamps, IP addresses, and browser/device information captured for the audit trail.
• Assistant connections: which AI clients you have connected, and the actions those connections take on your account.
• Product usage and diagnostic data: sign-ins, sessions, pages and features used, error logs.
• Payment data: we receive confirmation of purchase and billing metadata from our payment provider. We never see or store your full card number.

We use your data to provide the service: generating and prefilling documents, recommending templates, delivering signature requests and notification emails, maintaining signature evidence, supporting your account, securing and debugging the platform, measuring how features are used so we can improve them, and meeting legal and accounting obligations. Our legal bases, where the GDPR or similar law applies, are performance of our contract with you, our legitimate interests in operating and securing the service, your consent where we ask for it, and compliance with legal obligations.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use the contents of your documents to train AI models.

When you use the advisor, drafting help, or a connected assistant, the text you submit, which may include business details and document content, is sent to third-party AI providers to generate a response. Those providers process it under contract to return the output and are not permitted to use it to train their models. Avoid entering information into AI features that you are not permitted to disclose to a processor.

We use a small set of vendors under contract: cloud hosting, database, authentication, and storage infrastructure; an email delivery provider for signature invitations and notifications; a payment provider; and AI model providers. They process data only on our instructions. We also disclose data where we are legally required to, to protect our rights or the safety of others, or as part of a merger or acquisition, in which case this policy continues to apply until it is replaced with notice to you.

Signers you invite receive the document you sent them and see the identity of the sender and the other signers on that request. They do not get access to anything else in your account.

We are based in the United States and our providers may process data in the United States and other countries. Where data is transferred out of the UK, EEA, or another region with transfer rules, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Data is encrypted in transit and at rest by our infrastructure providers. Access to your records is enforced at the database level so only your account, signers holding a unique signing link, and authorised Revscale administrators can reach them. Administrator actions on customer accounts are recorded in an audit log. Completed documents are sealed with a cryptographic hash so tampering is detectable. No system is perfectly secure; protect your password and your signing links, and tell us immediately if you think your account has been accessed by someone else.

We keep your account, business profile, and documents for as long as your licence is active. Usage and diagnostic logs are kept for a limited period for security and troubleshooting. Signature evidence, meaning the consent record, timestamps, IP address, and document hash, is retained because it is the proof that a document was executed, and may be kept after account deletion where a party may need to rely on it. When data is no longer needed we delete it or irreversibly anonymise it.

You can edit your profile and business details, control notification emails, export or print your documents, and request account deletion from Settings at any time. Depending on where you live you may also have the right to access, correct, delete, port, or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. Contact us and we will respond within the time required by applicable law, without discriminating against you for asking. If you are in the UK or EEA you may also complain to your local supervisory authority.

We use only the cookies and local storage needed to keep you signed in, remember your preferences, and measure product usage in aggregate. We do not run advertising trackers. BusinessDocs is for businesses and is not directed to anyone under 18; we do not knowingly collect data from children.

We may update this policy; the date above will change and material changes will be announced in the product. Privacy questions, requests, and security reports can be sent to Revscale Technologies, Inc. at support@revscalemail.com.