Privacy Policy

Falcon PDF ("we", "us", "our") operates the Falcon Sign platform (sign.falconpdf.com and mobile applications). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

Account Information: Name, email address, phone number, company name, and password hash when you create an account.

Document Data: PDFs you upload for signing or verification. For self-signing, documents are processed locally and never stored on our servers. For request-signature workflows, documents are stored encrypted until all parties have signed + 30 days.

Certificate Data:When you import a .pfx certificate, the private key is stored exclusively in your device's secure hardware (Android Keystore / iOS Secure Enclave). We never receive or store your private key.

Usage Data: App usage analytics (features used, session duration), device information, and crash reports. No document content is included.

Payment Data: Processed by Razorpay. We store only transaction IDs and subscription status — never card numbers.

We use your information to: provide and improve our services, process payments, send transactional emails (signing notifications, receipts), provide customer support, and comply with legal obligations under the IT Act, 2000.

All data is stored on servers located in India (AWS Mumbai region). Documents are encrypted at rest using AES-256 and in transit using TLS 1.3. Access to production systems is restricted to authorized personnel with multi-factor authentication.

We do not sell your data. We share data only with: payment processors (Razorpay), email delivery services (for notifications), Aadhaar eSign providers (when you use eSign), and law enforcement (only with valid court orders).

Account data: retained while your account is active + 30 days after deletion. Request-signature documents: retained until completion + 30 days. Audit trails: retained for 7 years (legal compliance). Self-signed documents: never stored on our servers.

You have the right to: access your data, correct inaccuracies, delete your account and data, export your data, and withdraw consent for marketing communications. Exercise these rights via Settings > Privacy or by emailing privacy@falconpdf.com.

We use essential cookies for authentication and session management. Analytics cookies (Plausible — privacy-friendly, no personal data) are used to understand usage patterns. See our Cookie Policy for details.

Falcon Sign is not intended for users under 18. We do not knowingly collect data from minors.

We may update this policy periodically. Significant changes will be communicated via email and in-app notification at least 30 days before taking effect.

For privacy-related inquiries: privacy@falconpdf.com. Data Protection Officer: dpo@falconpdf.com. Address: Falcon PDF, Bangalore, India.