This Privacy Policy explains how NDA Jam (“NDA Jam”, “we”, “us”) collects, uses, stores and protects information when you use our website and services at ndajam.app (the “Service”).
1. Information we collect
We collect the following categories of information:
- Account information. Your email address (always), and your name and profile photo when you sign in with a third-party identity provider (Google, Microsoft, Apple).
- Business profile. The legal name, address, country, jurisdiction, optional business identification number and signing name you supply during onboarding.
- NDA content. The title, purpose, parties, dates, terms and any optional message you include in an NDA, plus the final signed PDF.
- Signing events. Your IP address and user-agent at the time you sign an NDA, the signing method (typed or drawn), and an audit log of every NDA-related action.
- Operational logs. Error reports and email delivery status to keep the Service running.
2. How we use your information
We use your information to:
- Create, send, sign and store NDAs you and your counterparties initiate.
- Verify your identity and keep your account secure.
- Send transactional email (sign-in links, NDA invites, reminders, completion notices).
- Maintain an audit trail for legal-compliance purposes.
- Detect and prevent abuse, spam and misuse of the Service.
- Improve the Service and respond to support requests.
We do not sell your personal information, and we do not use it to target you with advertising.
3. Where your data is stored
NDA Jam runs on Cloudflare infrastructure. Account, business profile, NDA and audit data is stored in Cloudflare D1 (a managed SQLite database). Signed PDFs and drawn-signature images are stored in private Cloudflare R2 buckets and accessed only via authenticated, permission-checked routes. Data is hosted in Cloudflare’s global network, which may include locations outside your country of residence.
4. Third-party services we use
- Cloudflare. Hosting, storage, DNS, security and edge compute.
- Resend. Transactional email delivery (sign-in links, NDA invites, reminders, completion).
- Google, Microsoft, Apple. Optional sign-in providers; only the basic profile fields you authorise are received.
- Cloudflare Turnstile. Bot protection on sign-up and signing pages; this involves a JavaScript challenge served by Cloudflare.
5. Cookies and authentication
We use strictly-necessary cookies to keep you signed in and to maintain your session. We do not use analytics or advertising cookies.
6. Data retention
Signed NDAs are intentionally immutable and undeletable. Once a counterparty has signed, the document and its audit trail are preserved for the legal duration of the agreement. You can close your account at any time; in-progress and completed NDAs you have signed will remain on the system for legal-record purposes. Email delivery logs and signing audit events are retained for as long as we operate the Service.
7. Your rights
Depending on where you live, you may have rights to access, correct, export or delete personal information we hold about you. Because signed NDAs are a permanent legal record, some deletion requests cannot be fully fulfilled, but we will always respond and explain what we can and cannot do. To make a request, email privacy@ndajam.app.
8. Security
We protect your information with industry-standard technical and organisational measures: TLS in transit, encryption at rest in Cloudflare storage, strict per-route permission checks, and rate-limited authentication endpoints. No service can guarantee perfect security; if we ever become aware of a breach affecting your data, we will notify you promptly.
9. Children
NDA Jam is not intended for use by anyone under 18 years old. We do not knowingly collect information from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make a material change, we will update the “effective” date at the top of this page and, where appropriate, notify you by email.
11. Contact us
If you have questions about this Privacy Policy or how we handle your information, email privacy@ndajam.app.