LineQuill LLC, a Mississippi limited liability company ("LineQuill," "we," "us," or "our"), provides electronic-signature and document-workflow services. This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information when you visit our websites, join our launch list, use an account or workspace, respond to a signing invitation, or contact us.
"Personal information" means information that identifies, relates to, or can reasonably be linked with an individual, including information treated as personal data or personal information under applicable law. "Customer" means the person or organization that controls a LineQuill workspace or sends a document. "Customer Content" includes documents, templates, form entries, recipient details, signatures, and associated transaction-specific activity, consent, verification, and completion records.
We do not sell personal information, share it for cross-context behavioral advertising, or use Customer Content to train general-purpose or shared AI models. Sending a document through LineQuill does not make its contents public. The Customer's authorized recipients and administrators may nevertheless receive or access it as part of the requested transaction.
1. Our role and the Customer's role
When a Customer uses LineQuill to manage documents, the Customer generally determines why its Customer Content is processed, who receives it, and which records it must retain. We process that information on the Customer's behalf as a processor, service provider, or comparable role under applicable law. The Customer's privacy notice and our agreement with it, including any data-processing agreement ("DPA"), also matter.
We separately determine limited processing purposes for our own website operation, account administration, billing, communications with us, security of our Services, and legal compliance. In that context, we act as a controller, business, or comparable role to the extent the relevant law applies. We do not reclassify all document or signing-record information as our own business data merely because our software generates or stores it.
If you sign a document sent by a business, school, employer, landlord, or other organization, ask that sender about the transaction, the information it requests, and its use and retention of its copies. We will assist with requests concerning data we process on its behalf and will respond directly to requests concerning processing for which we are responsible. This Policy does not authorize a Customer to collect information unlawfully or override our contractual restrictions.
2. Information we receive directly
Account and workspace information. We receive names, email addresses, organization names, roles, account identifiers, billing contacts, settings, and information used to authenticate or recover an account. Account-security information may include password-verification data, authenticator enrollment information, recovery-code records, and remembered-browser identifiers. Do not share your password or authentication codes with support.
Documents and transaction information. Customers and recipients provide uploaded files, templates, text and form entries, signatures or initials, recipient names and contact details, signing roles, and related messages. Document contents may include business, employment, financial, educational, health, government-identifier, or other sensitive information selected by the Customer. We do not require every user to provide these categories; their presence often depends entirely on the document the Customer chooses to send. Restricted data requires the approvals described in our Terms and any applicable agreement.
Payment and purchase information. When a Customer pays for LineQuill, the payment provider processes payment credentials. We receive information needed to administer the purchase, such as billing name and address, payment-method type, limited account or card descriptors, tokenized references, transaction status, invoices, taxes, credits, and subscription or usage details. We do not store the full payment-card number or card security code used in the LineQuill checkout. This does not mean that a Customer could never place financial information in a document; such document content is handled separately and must comply with our Terms.
Support, privacy, and other communications. We receive the content of messages, attachments you choose to send, troubleshooting details, request history, and information reasonably needed to verify your authority. We may ask for a redacted example instead of a complete sensitive document. Information used to verify a privacy request is used for that purpose and associated security and compliance, not unrelated marketing.
Launch and marketing preferences. Our launch list collects an email address and an optional name. Requesting a launch notification authorizes the confirmation and launch communications described at signup, not an unrelated advertising campaign. We record subscription and unsubscribe preferences and any separate marketing permissions you provide.
3. Signing, verification, and technical information
Signing evidence. We record information about the workflow, such as the request and recipient identifiers, document version or integrity identifiers, actions and times, the disclosure or consent version presented, acceptance or decline events, selected authentication steps and their outcomes, and completion status. Depending on the event and configuration, records may include an IP address, browser or device information, delivery status, or other contextual metadata. Information included in the completed transaction record may be available to its authorized recipients.
Phone verification. A request configured for SMS verification uses the recipient's designated phone number and verification-message and outcome information. Codes and security credentials are protected and are not included as readable secrets in a recipient's completed document. The SMS provider and carriers necessarily process information needed to route and deliver the message. The sender should explain this requirement before inviting you.
ID-barcode checks. For the current optional ID-barcode workflow, the selected ID image is processed in your browser and is not uploaded by that check. Limited name and date information is transmitted to perform the comparison; the transaction record retains the check outcome rather than the submitted ID details or image. This is not a selfie, liveness, or biometric identity-matching service. A separate ID image you deliberately include as a document or support attachment would not be covered by the browser-only handling of this particular check.
Technical and security records. When you interact with the Services, we receive information such as IP address, browser and operating-system type, request times, account or session identifiers, the pages or features used, errors, and security events. An IP address may indicate an approximate location. We do not use this Policy to authorize precise-device-location tracking, contact-list harvesting, or background access to a camera or microphone. A camera permission requested for an optional check is limited to that user-initiated function.
4. Where information comes from
We receive information from you, the Customer that invites or authorizes you, other participants in the same transaction, devices and browsers interacting with the Services, and providers carrying out payment, message delivery, security, or other operational functions. An integration you or your organization deliberately enables may also supply information within the authorized scope.
A Customer can provide your email address or other transaction information before you visit LineQuill. Receiving an invitation does not mean you created an account or subscribed to marketing. A mistyped recipient address may cause an unintended invitation; contact the sender or LineQuill rather than forwarding a private signing link to someone else.
5. Why we process information
We process personal information to establish accounts and permissions; prepare, route, present, sign, seal, complete, and export documents; preserve requested transaction evidence; provide approved storage and retrieval; perform selected verification; deliver operational messages; administer purchases, usage, refunds, and taxes; provide support; prevent unauthorized access and fraud; investigate errors and security incidents; comply with law; and resolve disputes.
We also use limited operational information to maintain and improve reliability, accessibility, and usability. For Customer Content, improvement activities remain restricted to performing and supporting the contracted service; they do not authorize unrelated analysis of document contents or reuse across customers. Where we use deidentified operational statistics, we take reasonable measures to prevent reidentification, do not attempt reidentification except permitted testing, and impose appropriate restrictions on recipients.
We send marketing only within the permission or other lawful basis that applies to that communication. We do not add a Signer to a marketing list merely because a Customer provided the Signer's email address. Service and security notices are distinct from promotional email.
We do not use Customer Content to train general-purpose or shared AI models, target advertisements, create unrelated consumer profiles, or make decisions about a person's eligibility for employment, credit, insurance, or education. We do not offer a financial incentive for selling or sharing personal information. A material new use requires an appropriate legal basis, notice, and any necessary consent or contractual authorization before it begins.
6. When information is disclosed
Customers, administrators, and transaction participants. We make documents and transaction records available to the Customer, its authorized administrators and users, and recipients designated for that transaction, according to the workflow and permissions. Completed packages can contain participant details and signing evidence. Recipients may retain and disclose their own copies under their own duties. The sender determines whether a document should include information visible to other participants.
Operational providers. We disclose information needed by providers that host or back up systems, deliver email or verification texts, process payments, support security or malware screening, provide approved support tools, or perform similar functions. They may process only the information needed for their assigned work, subject to appropriate contracts, confidentiality, and security requirements. Payment providers may also process information for their own legally required fraud prevention, compliance, or financial-services purposes, as described in their notices. Current provider and location information may be requested through our privacy contact; an applicable DPA identifies authorized subprocessors.
Customer-selected connections. We disclose information to an external integration when the Customer or other authorized user directs that connection. The integration's independent handling is governed by its applicable terms and privacy notice. Disabling a connection prevents future authorized transfers but may not erase copies already received.
Legal obligations and protection against harm. We may disclose information when legally required or lawfully necessary to respond to valid legal process, protect against fraud or an imminent threat of serious harm, or establish or defend legal rights. We assess authority, scope, and necessity and seek to limit disclosure. Where lawful and appropriate, we notify the affected Customer before producing its content. Student records and other regulated data remain subject to their additional restrictions; this paragraph is not a general permission to bypass them.
Professional advisers and corporate transactions. Relevant information may be disclosed to legal, accounting, insurance, or other professional advisers bound by appropriate duties. In a merger, acquisition, restructuring, financing, or sale of relevant assets, information may be reviewed or transferred subject to lawful safeguards and continuing applicable obligations. A transaction does not itself authorize unrelated use of Customer Content or override a school agreement, required notice, or consent.
We may make another disclosure at your specific direction or with your valid permission. We do not sell personal information or share it for cross-context behavioral advertising. We do not authorize an advertising network to use activity in a signing session to track individuals across unrelated services.
7. Cookies, browser storage, and communications
We use cookies or similar browser storage needed to establish sessions, protect forms and accounts, remember an authentication choice, and maintain essential preferences. A remembered-browser option is a convenience for authentication, not permission to track browsing elsewhere. You can use available account controls to revoke remembered browsers and browser controls to remove stored information. Blocking essential storage may prevent login, signing, or security functions from working.
Optional analytics or other nonessential tracking must be identified in the applicable cookie notice and controlled as required by law before it is enabled. We do not place advertising trackers on the basis of this Policy. A Customer's document or an external service you separately choose may contain links to sites we do not control; this Policy does not govern information you provide on those sites.
We do not use ordinary browser "Do Not Track" signals as a separate settings control. This is distinct from a legally recognized opt-out preference signal such as Global Privacy Control. We do not sell, share for cross-context behavioral advertising, or conduct targeted advertising, so those activities are already off for everyone. We honor legally applicable opt-out preference signals for any processing to which they apply, without requiring you to create an account.
Operational email and SMS systems process delivery, bounce, verification, and failure information needed to communicate or secure a transaction. Any optional open tracking, click tracking, or additional messaging analytics must be separately identified before use; this Policy does not authorize undisclosed tracking pixels.
8. How long information is retained
Retention depends on the category, the requested service, our role, applicable agreements, and law. We retain information only for as long as reasonably necessary for a disclosed purpose or a specific legal obligation. The criteria below are not permission to retain all records indefinitely.
Customer documents and transaction records. We retain these to provide the Customer's requested storage and evidence functions, subject to its lawful instructions, the account relationship, any agreed schedule, and applicable retention or deletion duties. Documents do not automatically disappear when a signing link expires or a subscription stops renewing. Deletion requests are reviewed for authority and lawful limitations. An applicable DPA or student-data rider may impose specific return or destruction deadlines that override the standard process.
Accounts and contacts. We retain information needed to administer an active account, address closure or recovery, and meet related legal or security needs. After closure, we remove or deidentify information no longer required rather than retaining an unused full profile without a purpose.
Billing and accounting. We retain invoices, transaction details, tax documentation, refunds, and related records for the period needed to meet applicable accounting and tax obligations, handle payment disputes, and establish or defend relevant claims. That need does not ordinarily require keeping the contents of the documents the Customer paid to send.
Security, technical, and support records. Retention reflects the time needed to investigate incidents, detect abuse, resolve support issues, verify remediation, and satisfy applicable legal requirements. We minimize the personal information included in such records and restrict retained records to their relevant purposes.
Verification inputs. Temporary verification information is retained only as needed to complete and secure the check or meet a specifically applicable legal requirement. The browser-only ID-check handling described in Section 3 applies to that feature. A verification result included in a transaction's evidence follows the retention rules for that transaction, rather than justifying retention of the raw ID image or submitted check details.
Marketing preferences. We retain signup information for the communications requested and remove or suppress it when it is no longer needed. We may keep a limited suppression record to avoid contacting a person who unsubscribed; a suppression record is not an active marketing profile.
Backups and legal holds. When information is deleted from LineQuill’s active systems, residual copies may remain in encrypted or otherwise protected backup systems for up to 30 days as part of our routine disaster-recovery process. Backup copies are not used for ordinary business purposes and are deleted or overwritten automatically according to our backup schedule. If a backup containing previously deleted information must be restored, LineQuill will take reasonable steps to reapply applicable deletion instructions.
A shorter retention period required by applicable law or an applicable contractual commitment will control where technically and legally required.
LineQuill may retain information beyond an otherwise applicable deletion period when reasonably necessary to comply with a valid legal hold, court order, regulatory requirement, or other legal obligation. Information retained for such purposes will be restricted from ordinary use, retained only for the applicable legal purpose, and deleted when the applicable retention requirement ends unless another lawful basis for retention applies.
9. Security and access by LineQuill
We use administrative, technical, and physical safeguards appropriate to our Services and the information processed. They include access controls, encrypted communications, protection of stored documents, account-security measures, and monitoring appropriate to the risks. Technical descriptions of the current product appear on our security page, but neither that page nor this Policy promises that every attack will be prevented.
Personnel access is limited to legitimate purposes such as approved support, infrastructure operation, security investigation, and legal compliance. Customer-approved in-app support is distinct from necessary infrastructure administration. The Services are not end-to-end encrypted, and authorized infrastructure personnel can technically access server-managed keys and documents. We protect that access through appropriate restrictions rather than claiming it is technically impossible.
No storage or transmission method is completely secure. Please secure your devices, use available authentication controls, protect private signing links, and notify us promptly about suspected unauthorized activity. We will investigate personal-information incidents and provide notices required by law or an applicable agreement. We will not wait for every investigative detail before making a notice whose legal or contractual deadline has arrived.
10. Access, correction, deletion, and other choices
You can use available account controls to update your profile, manage authentication, and retrieve available records. Customers can direct authorized workspace administrators to use export tools or request assistance. You can also contact legal@linequill.com without creating an account. We will provide a reasonably accessible alternative on request.
Depending on your location, our role, applicable exemptions, and whether a law applies to our business, you may have rights to know what information is processed; access a copy; obtain information about recipients or disclosures; correct inaccuracies; request deletion; receive a portable copy; restrict or object to certain processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a denial. We will not unlawfully discriminate or retaliate because you exercise a right.
We may need to verify your identity and authority proportionately to the request, using information already available where possible. We do not require unnecessary government identification or a new account merely to submit a request. An authorized agent may act for you with appropriate proof of authority. We will not impose identity verification on an opt-out request where law prohibits it.
We respond within the period required by the applicable law and explain a lawful extension when necessary. Requests are generally free. We will charge a fee or decline a request as repetitive, excessive, or unfounded only where law permits and will explain the basis. If we deny a request, we will explain the reason to the extent lawful and provide any applicable appeal procedure. You may appeal by contacting legal@linequill.com with "Privacy Appeal" and the request reference. Where your law provides further recourse, you may contact its competent privacy authority or attorney general.
For Customer Content we process only on a Customer's behalf, we may refer the request to that Customer and assist it rather than independently deciding whether a document must be changed or deleted. Tell us the sender or request identifier when available, but do not send unnecessary document contents. A controller may have a lawful reason to preserve a completed transaction. An audit record is not automatically exempt from privacy law, and requests will be assessed rather than categorically refused.
Erasing our copies cannot recall copies already downloaded by other authorized parties. Correcting a personal detail does not ordinarily mean silently rewriting a previously executed contract; a lawful correction may require a separately identified amendment or replacement record. This protects record integrity without eliminating statutory rights.
11. Email, SMS, and signing choices
Use the unsubscribe method in a promotional email or contact us to stop those messages. We may still send necessary account, transaction, security, billing, and legal notices. A launch-list unsubscribe does not prevent a sender from initiating a legitimate document request through a separate transaction.
Verification texts are used for the security step selected for a signing request, not as permission for unrelated SMS marketing. Message and data rates may apply. You may use the available opt-out or support method and contact the sender about an alternative workflow. If phone verification is required, declining it may prevent completion through that workflow, but does not eliminate a paper or other legally available alternative.
Declining an invitation, withdrawing electronic-delivery consent, canceling a paid plan, and requesting data deletion are different actions. The Electronic Records and Signature Disclosure and Consent explains how to decline or withdraw electronic consent. The Terms explain billing cancellation. This Policy explains privacy requests. None of these actions, by itself, rescinds a separate underlying contract.
12. Children and student education records
The standard Services are intended for adults, not for direct use by children or other people under 18. We do not knowingly permit direct under-18 use outside a separately approved arrangement with appropriate safeguards. If you believe a child has directly supplied information contrary to this policy, contact legal@linequill.com. We will investigate and take appropriate steps, including restricting the interaction and obtaining required authorization or deleting information as required by law.
This age restriction does not mean that we never process information about children. Authorized adults and schools may send records concerning students or dependents, including permission forms, individualized education programs, and related educational records. A school must have an appropriate written agreement with LineQuill before using the Services for student education records. We process those records under the school's lawful instructions and the agreed restrictions, not as an independent source of advertising data.
We do not sell student information, use it for advertising, build unrelated student profiles, or use it to train general-purpose or shared AI models. Parents, guardians, and eligible students should contact the school for access or corrections to school-controlled records; we will assist the school as required. A school's authorization does not eliminate any legal duty that applies directly to LineQuill. Direct interaction with a child requires separate analysis and safeguards; a school account is not blanket permission to collect from children.
13. Additional U.S. state information
State privacy rights vary and may depend on business thresholds, the type of information, and exemptions. Nothing in this section represents that every comprehensive state privacy statute applies to LineQuill. Where such a statute applies, we honor its applicable rights and processor or service-provider restrictions. Our no-sale and no-targeted-advertising practices apply independently of those thresholds.
For California residents, the categories described in Sections 2 and 3 correspond to identifiers; personal information in customer records, including signatures and contact information; commercial information; internet or electronic-network activity; approximate geolocation derived from network information; and professional or employment information. Customer documents may additionally contain education information, protected-classification information, financial or government-identifier information, health or other sensitive information, and visual or other content the Customer supplies. We do not independently collect every statutory category merely because a Customer's document might contain it.
The collection and business-purpose disclosures during the preceding 12 months, or the shorter period since operations began, follow these categories: account and contact data to operational and support providers; commercial and billing data to payment, accounting, and relevant operational providers; technical and security data to hosting and security providers; and Customer Content, including any sensitive categories it contains, to authorized transaction participants and subprocessors necessary for the Customer's service. Legal and corporate-transaction disclosures are limited as described in Section 6. Sources are described in Section 4, purposes in Section 5, and category-specific retention criteria in Section 8.
We have not sold personal information or shared it for cross-context behavioral advertising during that period, including information we know relates to a person under 16. We use sensitive personal information to provide the requested Services, maintain security, follow lawful instructions, and perform other legally permitted limited purposes, not to infer unrelated characteristics for advertising. We do not disclose personal information to third parties for their own direct marketing.
Where the CCPA applies to our handling, California residents may request access or information about collection and disclosure, correction, deletion, and applicable limits on sensitive-information use; may use an authorized agent; and have a right to non-discrimination. Submit requests through Section 10. For applicable CCPA access, correction, and deletion requests, we confirm receipt within 10 business days and ordinarily respond within 45 calendar days, with a permitted extension and timely explanation when necessary. A Customer's service-provider data may need to be addressed through that Customer. Mandatory rights are not waived by accepting our Terms.
14. International processing
LineQuill is based in the United States. LineQuill’s primary application infrastructure and business operations are based in the United States. Certain service providers and subprocessors may process or access personal information from other countries as necessary to provide their services. A current list of material subprocessors and their processing locations is available upon request or through any subprocessor list we make available.
Recipients or Customer-selected integrations may process their own copies elsewhere. Different countries may provide different legal protections.
Where a transfer is restricted by applicable data-protection law, we use a legally permitted mechanism and required safeguards before making the transfer. These may include an applicable adequacy determination or properly completed contractual safeguards, depending on the relationship and destination. This Policy is not itself a transfer mechanism, a certification under a privacy framework, or a claim that all necessary international agreements have already been executed. Contact legal@linequill.com for information about safeguards applicable to your information and a copy where you are entitled to one, subject to necessary redactions.
15. Additional information where European or UK law applies
For processing in which we act as a controller and relevant European or UK data-protection law applies, the legal basis depends on the purpose. We use information necessary to perform a contract with you, comply with a legal obligation, pursue legitimate interests that are not overridden by your rights, or act on valid consent where required. Our legitimate interests include securing the Services, preventing fraud, administering organizational relationships, resolving support issues, and establishing or defending legal claims. They do not authorize unrestricted reuse of Customer Content.
Where the Customer is the controller, it determines the lawful basis and any additional condition for processing special-category information. We process on its lawful documented instructions and under the applicable DPA. Providing information about someone else is not, by itself, proof of that person's consent. If consent is the basis for our own processing, you may withdraw it without affecting processing that was lawful before withdrawal.
You may have rights of access, rectification, erasure, restriction, portability, and objection, including an objection to direct marketing. You may request review of a significant automated decision where applicable law gives that right. Our automated security and verification checks may flag or prevent an interaction, and you may contact us to seek human review. We do not, on our own behalf, use Customer Content to decide eligibility for employment, credit, insurance, or education.
We respond within the applicable statutory period, ordinarily one month for requests governed by the GDPR, with permitted extensions where justified and explained. You may complain to the competent supervisory authority, including where you live or work or where an alleged infringement occurred; UK individuals may contact the Information Commissioner's Office. Where a representative is legally required, the applicable representative details must be provided in the regional notice accompanying this Policy. Availability of this section does not by itself mean the Services are configured for every international use case.
16. Other websites and organizational notices
This Policy does not govern independent websites, apps, or services accessed through links or integrations, or a Customer's use of its own copies. Review the relevant organization's notice before providing information to it. Our responsibility for our own disclosures and selected service providers is not removed by this distinction.
This Policy does not replace a separately provided employee or applicant notice, a signed DPA, a student-data rider, a business associate agreement, or a legally required transaction-specific notice. Those documents control their particular subject matter where applicable.
17. Changes to this Policy
We may update this Policy to reflect lawful changes in our practices, Services, or legal requirements. We will change the effective date and provide direct or prominent notice appropriate to the significance of the change. For a materially new use or disclosure, we will provide notice before the change applies and obtain any required consent or contractual authorization.
Posting a revised Policy does not retroactively authorize processing that was unlawful, amend a signed school agreement, or eliminate existing privacy rights. We will not silently expand permitted use of Customer Content through a website update. Prior versions can be requested through our privacy contact.
18. Contact us
LineQuill LLC
General inquiries: hello@linequill.com
Privacy and data-protection contact: legal@linequill.com
Account and signing support: support@linequill.com
Include enough information to locate the issue, such as your contact email, the Customer's name, or a request reference. Do not include a password, verification code, complete identity document, or unnecessary sensitive document content in your initial message.