Privacy Policy

Everything below is information you type in yourself, or that the software derives from it.

Your account

Your email address, your name, and your account role (notary, company user, or administrator). There is no password, because Dr. Signing does not use passwords — see “Signing in” below.

Your notary profile

Your full name, business name, headline, biography, phone number, website, and profile photo. Your street address, city, state and ZIP code. The map coordinates derived from that address. Your service radius, the states you serve, the languages you speak, and the signing types you accept.

Your credentials: commission number, commissioning state and commission expiration date; your E&O carrier, coverage amount and policy expiration date; whether you hold an NNA certification; the date of your most recent background check; and any other certifications you list.

Practical details: years of experience, whether you accept remote online notarization, and whether you have a dual-tray printer and a scanner. Optionally, the fees you charge per signing type.

Sign-in and security records

A record of each sign-in link requested for an email address, with a timestamp. This exists for one reason: to stop someone from using the sign-in form to flood a stranger's inbox. It is deleted automatically one hour after it is written.

Payment records

If you subscribe to Pro, we store the Stripe customer ID and subscription ID Stripe gives us, the status of the subscription, its renewal date, and whether it is set to cancel. We do not store your card number, expiration date or security code, and we never see them.

We do not ask for and do not store your Social Security number, your date of birth, your driver's license, or your bank account details.

A public profile is genuinely public. It is served to anyone on the internet without an account, it is listed in our sitemap, and search engines are invited to index it. A public profile shows your name and business name, your city and state, your headline and bio, your photo, your service radius and the states you serve, your languages and signing types, your years of experience, and — when you provide them — your phone number and website.

Most of your credentials are part of what is published. That includes your commissioning state and the month your commission expires, your E&O carrier and coverage amount, your NNA status, your background-check date and your other certifications. Publishing them is the point of a directory a title company can trust, but you should know it before you type them in. Leave a field blank and nothing appears.

Your commission number is never published. We collect it for one purpose — checking your commission against the state register, as described below — and it stays private. It is not on the list of fields a public page may show, so it does not reach the page, the structured data search engines read, or anything else served to a visitor. The reason is the same one that keeps us from trusting a New York commission automatically: states publish names and commission numbers together, so republishing that pair would only make it easier to collect, and would not prove anything about anyone.

Your street address is never displayed publicly. Neither is your ZIP code. We store the street address for one purpose: to turn it into coordinates so distance search works and so a pin can be drawn on the map. The list of fields that may appear on a public page is written out explicitly in the code, and the address is not on it.

Map pins are deliberately imprecise. Most signing agents work from home, so an exact coordinate is a home address. Before any coordinate leaves our servers — on the directory map and in the structured data search engines read — it is rounded to two decimal places, a grid of roughly 1.1 km, about seven tenths of a mile. That is precise enough to choose a notary in your area and not precise enough to find a front door.

You can turn it off at any time. Setting your profile to Private in your dashboard removes it from the directory, from the city and state pages, from the sitemap and from the public profile URL immediately. It does not delete your account. Note that search engines and archiving services keep their own copies on their own schedule, and we have no control over how quickly those disappear.

When you enter a commission number, Dr. Signing checks it against the state's own published register where that register exists. Today two states publish one: Texas and New York. We send the commission number to the state's open data endpoint and read back the record, then compare the name on it to the name on your profile.

Only Texas can produce a Verified badge automatically, and here is exactly why. Matching a name to a number proves nothing, because both are published together in a file anyone can download. Texas also publishes a contact email for each commission. We compare that email to the email on your account — the same inbox that receives your sign-in link. If they match, the badge is granted. If they do not, or if the state publishes no email at all, no badge is issued and the case goes to a manual review queue instead. New York publishes no contact detail, so a New York commission is never verified automatically.

The email the state publishes is never shown back to you or to anyone else in the application. We store the outcome of the check, a short note explaining it, and the date it ran.

There are no passwords anywhere in Dr. Signing. To sign in you enter your email address and we send you a one-time link. The link works once and expires after 24 hours. Because there is no password, there is no password for us to leak.

Sign-in and sign-up forms are protected by Cloudflare Turnstile, which decides whether a submission came from a person or a script.

Dr. Signing sets cookies only to run the sign-in system: a session cookie that keeps you signed in after you click your link, a cookie that protects forms against cross-site request forgery, and a short-lived cookie that remembers where to send you after sign-in. Cloudflare Turnstile may set its own cookie on pages that carry the challenge.

There are no advertising cookies, no analytics cookies and no tracking pixels. The site loads no Google Analytics, no advertising SDK, no session-replay tool and no social media tracker. If you never sign in, browsing the directory sets no cookie from us at all.

We do not respond to Do Not Track signals, because we are not doing the tracking those signals are meant to stop.

We use the following services to run Dr. Signing. Each one is bound by its own privacy policy, linked below. We do not sell your personal information, and we do not share it with anyone for advertising.

• Vercel

  Hosting and content delivery for the website itself.

• Neon

  The PostgreSQL database where your account and profile are stored, hosted in the United States (US East).

• Resend

  Sends transactional email — currently the sign-in link, and nothing else.

• Stripe

  Processes Pro subscription payments. Checkout and the billing portal are hosted by Stripe; card numbers are entered on Stripe pages and never reach Dr. Signing servers.

• Cloudflare

  DNS for drsigning.com, and the Turnstile challenge that tells a person from a bot on the sign-in and sign-up forms.

• OpenStreetMap / Nominatim

  Converts the address you enter into map coordinates. Your address text is sent to Nominatim when you save it, and only then — never on every search.

• OpenFreeMap

  Serves the map tiles drawn behind the directory map. Your browser requests tiles directly, so OpenFreeMap sees your IP address like any website you visit.

Beyond these, we will disclose information if we are legally required to — a subpoena, a court order, a valid request from law enforcement — or where we need to in order to establish or defend a legal claim.

• Your account and profile are kept until you ask us to delete them. A profile set to Private stays in the database; it just stops being published.
• Sign-in links expire after 24 hours and are purged after they expire.
• Sign-in attempt records are purged one hour after they are written.
• Payment and subscription records held by Stripe are kept under Stripe's own retention rules, which we do not control and which are generally driven by tax and accounting law.

Email support@drsigning.com from the address on your account and ask us to delete it. There is no self-service delete button in the dashboard yet; until there is, email is the way, and we will confirm when it is done.

Deleting your account removes your user record and, with it, your notary profile, your street address and coordinates, your credentials, your fee schedule, your sessions and your subscription record in our database. What survives is anything Stripe keeps about past payments, and any copy a search engine or archive made while your profile was public.

If you only want to disappear from the directory, you do not need us: set your profile to Private in the dashboard and it is out of the directory, the sitemap and the public URL straight away.

Dr. Signing does not yet handle loan documents. Signing orders, document exchange, the electronic journal and invoicing are planned, not shipped. Nothing described in this section is available today.

When those features ship, they will involve nonpublic personal information about consumers — borrowers and sellers at a closing table — and that brings the Gramm-Leach-Bliley Act and its Safeguards Rule into scope. In that arrangement Dr. Signing expects to act as a service provider to the title company, escrow office or signing service that sends the documents, and to the notary who receives them. We would handle that information only to perform the service asked of us, never to market anything to the consumer and never to sell it.

This policy will be updated before those features are turned on, and the terms governing them will be specific rather than anticipatory. Until then, the only consumer information in the system is what a notary chose to type about their own business.

If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the right to know what personal information we have collected about you, to get a copy of it, to correct it, to delete it, and to limit the use of sensitive personal information.

We do not sell personal information and we do not share it for cross-context behavioral advertising. There is no opt-out to offer, because the thing you would be opting out of does not happen. We will not discriminate against you for exercising any of these rights — there is no version of Dr. Signing that costs more because you asked a privacy question.

To exercise any of these rights, email support@drsigning.com from the address on your account. We will verify that the request comes from you before acting on it, which for a passwordless service means confirming control of the account email.

Dr. Signing is a professional tool for commissioned notaries and the companies that hire them. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has created an account, email us and we will remove it.

When this policy changes, the date at the top changes with it. If a change materially affects what we collect or who receives it — the document features described above being the obvious case — we will say so directly rather than quietly editing the page.

Questions about this policy, requests about your data, or a correction to something here that is wrong: support@drsigning.com.

See also our Terms of Service and what Dr. Signing is.