Privacy Policy

• Account data — your name, email, and password (stored hashed), and organisation details if you provide them.
• Documents — the files you upload to send for signature, and the signed output.
• Signer data — the names, email addresses, signatures, and the audit trail (timestamps, IP address, and actions) of the people you invite to sign.
• Usage and log data — device, browser, and interaction logs we use to run and secure the service.
• Payment data — records of the credits you buy. Card details are handled by our payment provider; we do not store them.

We use your data to deliver documents to signers, produce the signed file and its audit trail, run your account and billing, keep the service secure, respond to support requests, and meet legal obligations. We do not sell your data, and we do not use the contents of your documents to train machine-learning models.

We process your data to perform our contract with you (providing the service), to meet legal obligations (such as retaining records), and on the basis of our legitimate interest in operating and securing Dastkhat. Where the law requires consent, we ask for it.

Documents and account data are currently hosted with reputable cloud providers in the European Union, under their data-protection and security controls. A Pakistan-based data centre is on our roadmap. By using Dastkhat you consent to your data being processed in these locations.

We share data only with service providers that help us run Dastkhat — for example cloud hosting, email delivery, and payment processing — under agreements that limit them to processing it on our instructions. We may also disclose data where required by law or to protect the rights and safety of our users. We do not otherwise share your data with third parties.

We keep signed documents and their audit trails for as long as your account is active, and for a further period afterwards so that a signed document remains verifiable and to meet legal and record-keeping requirements. You can delete documents from your account; some records may be retained where the law requires.

We encrypt data in transit and at rest, restrict access to your documents, and maintain a tamper-evident audit trail for signed files. More detail is on our security page.

You can access, correct, export, or delete your personal data, and ask us to restrict or stop certain processing. To make a request, email support@dastkhat.pk. We will respond within a reasonable time.

We use essential cookies to keep you signed in and to run the service, and limited analytics to understand how Dastkhat is used. We do not use advertising cookies.

Dastkhat is not intended for anyone under 18, and we do not knowingly collect data from children.

We may update this policy as the service evolves. If we make a material change, we will take reasonable steps to let you know.

Questions or requests about your data? Email support@dastkhat.pk or visit our contact page.