Legal
Privacy Policy
Effective July 12, 2026
What we collect
Account data: your email address and name (from Google sign-in or the email you provide). Document data: the answers you enter and the documents generated from them. Signing data: for e-signatures we record signer name, email, signature image or typed name, consent, timestamp, IP address, and device string — this audit trail is a legal feature of the executed document. Usage data: aggregate counters (documents created, exports) used to operate the service. We do not run third-party ad trackers.
How we use it
To provide the service: generating documents, sending sign-in links and signature invitations by email, exporting files, and improving Quill. AI features send the relevant document text to our AI provider (currently OpenAI) solely to produce the review or suggestion you requested; we use API settings that do not permit training on your data. We never sell personal information.
Where it lives
Data is stored in Amazon Web Services (DynamoDB, US region) and served through Vercel. Transactional email is sent through Plume, oodac's mail service (mail.oodac.com), via Amazon SES. All traffic is encrypted in transit (TLS).
Sharing
Documents are private to your account except when you create a share link, send a signature request, or export a file — each shares exactly what you chose, with whom you chose. Service providers (AWS, Vercel, OpenAI, Cloudflare) process data under their respective agreements. We disclose data to authorities only when legally required.
Retention & deletion
Your documents stay until you delete them. Deleting a document removes it and its share and signing links. To delete your entire account and its data, email quill@oodac.com — we complete deletion within 30 days. Executed signature certificates may be retained by the other signing parties, who received lawful copies.
Your rights
You can access, correct, export, or delete your data at any time (in-product or by email). California and EU/EEA/UK residents have additional statutory rights — contact us and we'll honor them. We don't discriminate for exercising privacy rights.
Children
Quill is not directed at children under 13 and we don't knowingly collect their data.
Contact
Privacy questions: quill@oodac.com. We'll update this page (with a new effective date) if our practices change.