Privacy Policy

What we collect

When you sign an NDA through Threshold, we collect:

• Your name and email address
• Your company and/or phone number, if the event requires them
• Any answers you give to custom fields the organizer configured
• The signature image you draw
• Your IP address and browser/device user-agent string
• The exact date and time you signed

Why we collect it

This information is collected solely to generate the signed NDA record itself and to preserve it as a legally meaningful document — the name/email/signature/timestamp/IP address are printed on the certificate footer of every signed PDF as part of what makes it a credible, tamper-evident record. We don't use it for advertising, and we don't sell it.

Who we share it with

We don't sell or rent your data. It is shared only with the infrastructure providers required to run the service ("sub-processors"):

• Supabase — our database, authentication, and file storage provider. Every signed record, PDF, and signature image is stored in Supabase's infrastructure.
• Vercel — our hosting provider. Every request to this site passes through Vercel's servers.
• Stripe — our payment processor. If you're an organizer who pays for an event or a subscription, your payment is collected by Stripe on its own hosted page: card details go straight to Stripe and never touch our servers. We keep only Stripe's record of what was bought (customer and subscription IDs, amounts, status). Signers who simply sign an NDA are never sent to Stripe.
• Resend — used only if the organization running your event has configured it, to email you a copy of your signed PDF or a link to sign.

Does AI process your data?

No. Threshold has an optional AI drafting feature that helps an organization write NDA template text — it only ever processes a short description the organization's admin types in (e.g. "mutual NDA for a vendor visit"). It never sees your name, email, signature, IP address, or anything else you submit when signing. If that ever changes, this section will be updated before it ships.

How long we keep it

Signed records are the legal artifact the organization needs, so by default we keep them indefinitely — the same way a paper NDA would sit in a filing cabinet. If you want your personal information removed from a signed record, contact the organization that hosted the event (see "Your rights" below). Deletion may be limited or delayed where the organization has a legitimate legal or record-keeping reason to retain the signed agreement itself — deleting your name from a record doesn't undo the fact that an agreement was made, and organizations may need to retain proof that it was.

Your rights

Each signed NDA is controlled by the organization that hosted the event you attended — they decide what happens with it, not Threshold. To access, correct, or request deletion of your information:

• Contact the organization you signed the NDA for directly.
• If you're not sure how to reach them, or have questions about how Threshold (the software provider) itself handles data, email privacy@threshold.example .

Questions

Read our Terms of Service for how the service itself may be used.