Privacy Policy
Last updated: November 2, 2026
This Privacy Policy explains how Exotic Motors ("we", "us"), the operator of E-Sign Auto (the "Service", esignauto.com), collects, uses, shares and protects personal information.
Information we collect
- Account and sign-up details: first and last name, email, hashed password, industry, and optionally company name, phone, job title, company size, main use, expected monthly documents, how you heard about us, and your marketing-email choice. We also record when you accepted the Terms and Privacy Policy.
- Documents and signing data: files you upload or create, field values, signer names and emails, signatures, and an audit trail (IP address, timestamps, user agent where available, and a cryptographic hash of completed documents).
- Payment data: subscriptions are processed by Stripe. Your card details go directly to Stripe; we receive only a customer/subscription ID, plan status, billing email, and limited details such as card brand and last 4 digits. See Stripe's privacy policy at stripe.com/privacy.
- Marketing attribution: the UTM source, medium and campaign and the Google (gclid) or Meta (fbclid) click ID from the link you arrived on, stored in a cookie and saved with your account.
- Usage data: pages visited, device/browser information and IP address, including first-party page-view counters.
- Messages: what you send through our contact form.
How we use information
- To provide, secure and improve the Service: process documents, send signing requests and completed copies, and keep audit records.
- To process payments and manage subscriptions.
- To respond to you and send service emails.
- To measure and improve our marketing (see Cookies, analytics and advertising).
- To send marketing emails, only if you opted in; you can unsubscribe at any time.
- To comply with law and enforce our Terms.
AI processing
AI features analyze your document's text and layout on our servers to suggest fields and corrections. If an external AI provider is used, we send only what's needed for the request and do not permit it to train on your content.
Sharing
We do not sell your personal information for money. We share it with service providers that help us run the Service: Google Cloud (hosting, storage, database), Stripe (payments), our email provider (sending email), and Google Analytics, Google Ads and Meta (analytics and advertising, if enabled). We also share it with the signers and senders of documents you take part in, when required by law, or in connection with a business transfer.
Cookies, analytics and advertising
We use essential cookies to keep you signed in and secure your session, and a first-party cookie to remember how you found us. When enabled, we also use Google Analytics 4, Google Tag Manager, Google Ads conversion tracking (including enhanced conversions, which send a hashed version of your email to Google when you sign up) and the Meta Pixel, which set cookies and collect device and usage data to measure visits and ad performance. You can block or delete cookies in your browser settings, opt out of Google ads personalization at adssettings.google.com, use the Google Analytics opt-out add-on, and adjust Meta ad preferences in your Facebook settings. Analytics and advertising tags are never loaded in the admin area. Sharing data with advertising partners may be considered a "sale" or "sharing" under some state laws; see Your privacy rights.
Retention
- Free plan: documents are not stored. Completed signed PDFs are emailed to all parties and deleted from our storage 7 days after completion.
- Pro plan: documents are kept while your account is active (up to your 100 MB storage limit) until you delete them or close your account.
- Audit records, account and billing records may be kept longer where needed for legal, tax, security or dispute purposes.
Your privacy rights (including California/CCPA and other U.S. states)
Depending on where you live, you may have the right to know what personal information we collect and how we use it, to access, correct, delete or port it, to opt out of the "sale" or "sharing" of personal information and targeted advertising, to limit the use of sensitive information, and not to be discriminated against for exercising these rights. To make a request, use the contact form or email support@esignauto.com; we will verify your identity and respond within the time the law requires. You may use an authorized agent. We honor Global Privacy Control browser signals as an opt-out of sale/sharing where required. If we deny your request you may appeal by replying to our response.
Security
Data is encrypted in transit (HTTPS) and at rest by our cloud provider. Passwords are hashed. Signing links are unique and should not be shared. No system is perfectly secure.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect their information.
Changes
We will post changes here with a new effective date and notify you of material changes.
Contact
Exotic Motors, operator of E-Sign Auto: contact form or support@esignauto.com