Privacy & Terms

• Account info — your email and name from Google sign-in. Used to identify your account.
• Session metadata — when each writing session started and ended, total edit event counts by category (insertions, deletions, undo, redo, cut), pause patterns, and the length and annotations of paste events.
• Temporary paste reminders — when paste reminders are enabled, Signet stores approximately the first and last eight words of an unannotated external paste. This short excerpt syncs to your signed-in devices so you can identify the paste later. It is removed after you annotate the paste and otherwise expires automatically after 60 days. If you annotate the paste when prompted, no reminder is stored. You can turn paste reminders off in the extension settings.
• Document fingerprints — mathematical hashes of your document's state at intervals. Hashes cannot be reversed to reveal the text.
• Records — when you create a Writing Process Record, we store its metadata (timing, session summary, document title) to support permanent verification URLs.
• Rewind and revision-history evidence — if you run Rewind, or leave the revision-history witness enabled when creating a record, Signet renders images of your document's text at significant moments of its Google Docs revision history and stores them so verifiers can review them. This happens only when you initiate it; the images are generated on your device, and the revision stream itself is never uploaded — only the rendered views and derived metrics (timing, character counts) are stored. Switching the witness off when creating a record keeps the metrics and excludes the images.
• Form submissions — when you submit a contact form or waitlist signup on our website, we receive your email, name, optional institution, and any message you wrote. Used to respond to your inquiry and (where applicable) to add you to a waitlist.

• A continuous copy of your document or full pasted passages during live recording
• Which specific keys you pressed
• Clipboard content beyond the short, optional paste reminder excerpts described above
• Data from any site outside Google Docs
• Browsing history

To operate the service, create and verify records, and send automated confirmation emails when you submit a contact form or waitlist signup on our website. We do not currently send automated emails during onboarding, while using the extension, or when creating records. We do not sell your data. We do not use your data for advertising. We do not run third-party analytics or tracking inside the Chrome extension.

Session data is encrypted in your browser before being synced to your Signet account. The local copy is cleared after sync is confirmed.

Signet's infrastructure runs on the following third-party providers, all operating in the United States:

• Supabase, Inc. — database, authentication, and file storage. Holds your account, session metadata, temporary paste reminders, record data, and revision-view assets.
• Vercel, Inc. — hosts the getsignet.app web application and provides anonymous web analytics (page paths visited, country, device class, referrer). Does not receive account data, document content, or any data from inside the dashboard or extension.
• PostHog, Inc. — receives product analytics events (e.g., "user signed in," "onboarding completed," "record created," "verification document generated") to help us improve the product. Never receives document content, document titles, paste content, paste annotations, or record hashes.
• Google LLC — handles the OAuth sign-in flow. We receive your email and name from Google; Google does not receive your writing data.
• Resend, Inc. — delivers automated confirmation emails when you submit a contact form or waitlist signup on our website, and notifications to our team about new submissions. Receives your email address, name, and any message content you submitted. Not used for emails about onboarding, extension usage, or record creation — no automated emails are sent for those flows today.

We limit document content disclosed to these providers to the temporary paste reminder excerpts and revision views expressly described above. We do not share your data with any party outside this list, except when required by valid legal process (subpoena, court order) or with your explicit consent.

We do not use your data — including session metadata, document fingerprints, record data, or any behavioral signals — to train AI systems, our own or anyone else's. Our infrastructure providers operate under their own terms. We do not authorize your metadata, temporary paste reminders, or revision views to be used as training data for AI systems of any kind.

• Exclude any document from recording at any time via the extension.
• Turn off paste reminders in the extension settings. Completing an annotation removes its temporary reminder.
• Download a signed copy of your complete record from your dashboard.
• Delete your account by contacting support@getsignet.app.
• Sign out of the dashboard at any time. Note that signing out of the dashboard does not stop the extension from recording — you must use the extension's exclude or uninstall options to do that.

• Session metadata — kept while your account is active. Deleted 90 days after account cancellation.
• Temporary paste reminders — removed when you complete the paste annotation; otherwise automatically deleted after 60 days.
• Records — kept indefinitely to support permanent verification URLs. On account deletion, record data is anonymized (your account identifier is removed) rather than deleted, so verification keeps working for anyone holding a record you previously created.
• Account data — deleted on request, typically within 30 days.

You may request access to, correction of, or deletion of your personal data at any time by emailing support@getsignet.app. We respond within 30 days.

The Signet Academic extension operates only on docs.google.com. It does not run on any other site. It does not intercept network traffic or modify the Google Docs interface beyond a small, movable status chip and focused paste-annotation prompts. The extension requests only the minimum Chrome permissions required to function: storage (for authentication tokens and queued session data) and alarms (for background token refresh).

Signet Academic is not directed to children under 13. By creating an account, you confirm that you are at least 13 years of age. If you are under 18, you should review these terms with a parent or guardian. If we become aware that we have collected personal information from a child under 13, we will delete that information.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) give you specific rights regarding your personal information:

• Right to know what personal information we have collected about you.
• Right to delete personal information we have collected about you, subject to certain exceptions (including record data, which are preserved for permanent verification — these are anonymized on account deletion).
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. Signet does not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to non-discrimination for exercising any of these rights.

To exercise these rights, contact us at support@getsignet.app. We respond within 45 days as required by California law. You may also designate an authorized agent to make a request on your behalf — we will verify your identity before fulfilling the request.

If we make material changes, we will update the date above and notify active users by email. Continued use after changes take effect constitutes acceptance.

Privacy questions: support@getsignet.app