Privacy Policy
Effective date: May 15, 2026 · Last updated: May 15, 2026
This Privacy Policy applies specifically to the InkChase product operated at inkchase.app and describes how we handle your DocuSign envelope data. The AVSaaS company-wide Privacy Policy also applies and governs any areas not specifically addressed here.
1. What Data InkChase Accesses from DocuSign
InkChase connects to your DocuSign account using OAuth with read-only scope. Specifically, InkChase reads: envelope status, envelope subject, signer status (pending/completed/declined), signer count, and last-modified timestamps. It does not read, store, or process envelope document content, signature images, or certificate data.
Signer email addresses are hashed (SHA-256) before storage — no plaintext email is written to the database. The only data we store is: your DocuSign account ID, envelope metadata (status, subject, signer counts), hashed signer identifiers, and event timestamps.
2. Reminder Engine
When InkChase sends reminders, it calls DocuSign's native notification API on your behalf. InkChase does not modify envelope content, signatures, or recipient lists. Reminders are delivered by DocuSign's own infrastructure — InkChase triggers the send but does not transmit document data. Reminder send records (timestamp, envelope ID, reminder count) are stored in your tenant partition and deleted when you cancel your account.
3. Data Residency
Envelope metadata and reminder records are stored in the region you select at account creation: EU-Central (Frankfurt) or US-East (Virginia). Data does not replicate across regions.
4. DocuSign OAuth Permissions
InkChase requests only the minimum OAuth scopes required to read envelope and signer status and to send reminders via the DocuSign eSignature REST API. We will never request scopes that allow modifying envelope content, adding or removing recipients, or voiding envelopes. If DocuSign changes their API in a way that requires additional scopes, we will request your explicit re-authorization and explain exactly why each new scope is needed.
5. Retention and Deletion
Envelope metadata and reminder records are retained while your account is active. When you disconnect your DocuSign account or cancel your InkChase subscription, all envelope data is deleted within 30 days. Hashed signer records are included in this deletion.
6. Account Data
InkChase stores your DocuSign account ID, the email address associated with your InkChase account (used for support and billing notices), and your configured reminder rules. Account email is stored encrypted. We do not use your account email for marketing.
7. Contact
Data privacy questions for InkChase: [email protected]