Privacy

Who this is

Adelo Docs is a product of Adelo Health, LLC, Houston, Texas. Questions, requests and complaints all go to one place: adam@adelohealth.com.

There are two kinds of people here

The distinction matters, because they are treated differently and have different rights.

Account holders are companies that use Adelo Docs to issue their own contracts, and the people at those companies who sign in.

Signers are people sent a link to sign a document. A signer has no account, never creates one, and gives us nothing except by signing. Most people who touch this product are signers.

What is collected, and why

From an account holder

Name and email address, for the account. The contents of the documents created — which will include the account holder’s own customers’ names, addresses, contacts and commercial terms, because that is what a contract is. That content belongs to the account holder. It is stored so the product can render, send and invoice from it, and for nothing else.

From a signer

When somebody signs a document, the following is recorded and kept as part of the signature: the name and email the document was addressed to, the name they typed, the signature image if they drew one, the IP address and browser the signature came from, the moment it happened, and a fingerprint of the exact consent wording shown to them.

That list is not incidental and is not analytics. It is what the federal ESIGN Act and state UETA require in order for an electronic signature to be attributable to a person — intent, consent, attribution, integrity and retention. An electronic signature without them is a picture of a signature. This is the one place where collecting less would make the product not work.

What is never done

• No advertising, and no data sold or rented to anyone, ever.
• No tracking across other websites. There is no analytics library, no tag manager and no third-party script anywhere in the product.
• No use of anyone’s contracts to train machine-learning models.
• No reading of one account holder’s documents by another. Companies are separated inside the database itself, not by application code.

The only cookies set are a theme preference and, for people with accounts, a session cookie. Neither follows anybody anywhere.

Who else touches it

Four companies, each doing one job:

• Supabase — the database, sign-in and document storage.
• Resend — delivers signing invitations and the emails that follow. It receives the recipient’s address and the message.
• Vercel — serves the application.
• Anthropic — and this one deserves more than a line, because it is the only one that sees the words in a deal.

Two features are built on a language model: the clause drafter, and the assistant that turns a counterparty’s request for changes into a proposed revision. When either is used, what is sent to Anthropic is the material that request is about — the order number and the customer’s name, the commercial terms and line items, the clauses already on the document, and, for a change request, the counterparty’s message in their own words.

What that means in practice, stated rather than implied: if you use those two features, the text of that deal leaves for a fourth company. Nothing else does. Documents are not sent there in the background, signing does not touch it, and an account that never opens the drafter or the revision assistant never reaches it at all. Anthropic does not train on it, under their commercial terms.

That is the complete list. It will be updated here if it changes.

How long things are kept — and one thing that cannot be deleted

Documents and their records are kept for as long as the account exists, because an executed agreement that disappears is not much use to either side of it. On request, an account and its documents can be exported and closed.

The audit trail is the exception, and this is said plainly rather than buried. When a document is signed, the record of that signing is written to a trail the database itself will not allow to be edited or deleted — not by an administrator, and not by us. That is deliberate: a record somebody can quietly correct is not evidence, and the entire point of the trail is that it can be relied on in a dispute years later.

So a request to erase a signature cannot be honoured the way a request to erase a mailing-list entry can. If you have signed something through Adelo Docs and want it removed, write to us — but understand that the counterparty holds a contract you executed, and the trail is the evidence of what happened. Requests are answered honestly, including when the answer is no.

Your rights

Depending on where you live you may have rights to access, correct, export or delete personal information, and to object to some processing. Write to adam@adelohealth.com and you will get a real reply from a person. Where a request conflicts with the paragraph above, you will be told exactly which part cannot be actioned and why.

If you are a signer, the company that sent you the document is the one that decided to collect it. We hold it on their behalf. You are welcome to come to us and we will help, and we will usually need to involve them.

Security, stated accurately

Traffic is encrypted in transit and data is encrypted at rest by the providers above. Signing links are bearer credentials, so only a hash of each one is stored — a link can be reissued but never recovered, including by us. Separation between companies is enforced by row-level security inside Postgres rather than by application code.

Adelo Docs does not currently hold a SOC 2 report or any other third-party security certification, and does not claim one. If that changes it will be said here.

Children

This is a business product, not directed to children, and not knowingly used to collect information from anyone under 18.

Changes

If this policy changes materially, the date at the top changes and account holders are told. Old versions are available on request.