Privacy
The short version: we can't read your documents, we don't track you, and we keep as little as we possibly can.
Who we are
PopDF is operated by Liquid Technology Limited, a company registered in Malta (C105818, VAT MT30465215), Tagliaferro Business Centre, Sliema, Malta ("we", "us"). For PopDF account data we are the data controller. Contact: technical@liqtek.com.
What we can and can't see
Documents you send through PopDF are encrypted in your browser before they reach us, with a key that exists only in the private links you share. We cannot read the documents, the fields or signatures in them, the names or details of signers, decline reasons or your messages. In GDPR terms, we hold that content only in a form we have no means of decrypting.
What we process
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Encrypted envelopes and submissions | To deliver the service | Contract (Art. 6(1)(b)) | Until the envelope pops (1 to 365 days after completion, or 7 to 90 days if unsigned), or sooner if the sender pops it |
| Hashed access tokens, signer status and timestamps | To control access and show progress | Contract | As above |
| A one-way fingerprint of the sender's email and a monthly send count | To apply plan limits | Legitimate interests (Art. 6(1)(f)) | Up to 40 days |
| Your email address, when you sign in | To send you a sign-in code | Contract | Not stored: it is used to send the code. We keep a one-way fingerprint of it as your account ID, a hash of the code for 10 minutes, and sign-in sessions for 30 days |
| Email addresses of the other parties, when someone chooses to email them about a new draft version or a signature | To send that short notice | Legitimate interests | Not stored: used to send the email, which names who made the change but not the document |
| A one-way fingerprint (SHA-256) of each signer's email, only when the sender requires signers to confirm their email | To check the signer signed in with that address | Contract | Until the envelope pops |
| The secret behind your authenticator codes and hashes of your backup codes, if you turn on two-step sign-in | To check the codes when you sign in | Contract | Until you turn it off or close your account |
| Your encrypted document list, and your account's public key | To show your documents on every device you sign in on | Contract | Until you ask us to delete your account. Entries for popped documents are removed when you next open the list |
| Technical request data handled by our hosting provider (such as IP address) | Security, abuse prevention | Legitimate interests | According to Cloudflare's standard retention, typically a few days |
| Emails you send us | To reply and give support | Legitimate interests | Up to 24 months |
Your PopDF account details (name, email, company, job title, address) are stored in your own browser, inside the encrypted envelopes you take part in, and, if you sign in, in your encrypted account. We don't receive them in readable form. Your document list is encrypted with a key that only your passkey or recovery code can unlock; we store it but cannot read it.
Cookies and tracking
The PopDF website and app use no advertising or analytics cookies and load no third-party trackers or fonts. The app uses your browser's local storage to remember your account and the envelopes you've sent or signed on that device; you can clear it at any time in your browser settings.
Who else is involved
We use Cloudflare, Inc. to host and serve PopDF, and Resend (Plus Five Five, Inc.) to send sign-in codes, which needs your email address and the code. Both act as our processors under data processing agreements and may process data outside the EEA under the EU Standard Contractual Clauses. We don't sell personal data, and we don't share it with anyone else unless the law requires us to.
Closing your account
You can close your account at any time from its page in the app. Your document list, the locks on it, your sessions, two-step sign-in and your details are deleted at once. Documents you sent keep working for the other people until they pop, unless you choose to pop them when you close.
Your rights
You can ask to access, correct or delete personal data we hold about you, object to or restrict processing, and receive your data in a portable form. Because we can't decrypt envelope content, the quickest way to delete it is for the sender to pop the envelope. Email technical@liqtek.com to exercise your rights. You can also complain to Malta's data protection authority, the Information and Data Protection Commissioner (IDPC), or to the supervisory authority where you live.
Changes
If we change how we handle data, we'll update this page and, for material changes, tell users in the app.