Your documents never leave your device.
HazardSign AI is built so the thing that matters most, the document you sign, stays with you. This page lists everything HazardSign AI does keep, why, and who else is involved. It applies to sign.alastella.com.
Who is responsible
HazardSign AI is run by Alastella Technologies Limited, trading as Alastella. The company decides how the information below is used and is responsible for it. Contact: hello@alastella.com.
What never reaches us
- Your documents. PDFs, photos and other files are opened, filled, signed and sealed in your browser. Word (.docx) files are converted to PDF in your browser too. None of them is uploaded.
- Your signature. The signature you draw or type is applied to the document in your browser.
- Your card details. Cards are entered on Paystack's secure page. We never see card numbers.
What we keep
- Your account: name, email address, and a scrambled (hashed) version of your password, so you can log in.
- Signing receipts: when you seal a document, your browser sends us its fingerprint (a SHA-256 hash), not the document. We store the fingerprint with a receipt ID and the time, and print the receipt ID on the document's audit certificate. A fingerprint can't be turned back into the document.
- Sign-in sessions: a random code per signed-in browser (we store only a hash of it), when it was created and expires, the browser type and IP address, so you stay signed in and we can stop abuse.
- Your plan: plan status and paid-up date, payment references, amounts and dates, and the Paystack customer and subscription codes that make renewals and cancellations work.
- Password resets: a single-use reset code (we store only a hash of it) when you ask to reset your password.
- Security records: short-lived counters of attempts per email address and IP address, to slow down password guessing and spam sign-ups.
Who else is involved
- Vercel hosts the website and Neon hosts the database that holds the records above.
- Paystack takes payments. It has its own privacy policy for the payment details you give it.
- Resend sends password-reset emails to your address.
We don't use analytics or advertising trackers on HazardSign AI, we don't sell your data, and we don't share it with anyone else.
How long we keep it
Your account, plan, payment records and signing receipts stay until you delete your account. Sign-in sessions expire after 30 days with “keep me logged in”, or after 12 hours otherwise. Reset codes expire after 30 minutes and work once. Attempt counters reset within an hour.
Getting or deleting your data
You can delete your account and its data yourself: see Delete your account. To ask for a copy of the information we hold about you, or a correction, email hello@alastella.com from the address on your account. For any other privacy question, use the same address.
Children
HazardSign AI is not directed at children under 13, and we don't knowingly create accounts for them.
Changes
If this policy changes, we'll update this page and the date at the top.