Legal
Privacy Policy
Last updated: July 13, 2026
Klardesk is operated by Lightbox Collective LLC (“Klardesk,” “we,” “us”). Our job is simple: help you get documents signed and contractors paid. Handling your information carefully is part of that job. This policy explains what we collect, how we use it, and the choices you have. Klardesk is offered in the United States only.
1. What we collect
We collect only what the service needs to work:
- Account information. Your name, email address, and workspace details when you sign up.
- Documents and signatures. The documents you upload, the fields you place, and the signatures collected — plus the audit trail for each signature (signer name, email, timestamp, IP address, and device information), which is what makes an e-signature verifiable.
- Contractor information. Names, email addresses, and payment records for the contractors your workspace pays.
- Tax information — held by Stripe, not by us. W-9 details (including full Social Security or tax ID numbers) are collected and stored by Stripe during contractor onboarding. Klardesk stores only the last four digits of a tax ID, so we can show you which contractors are 1099-ready without holding the sensitive number ourselves.
- Billing information. Your payment methods are stored by Stripe. We see summaries (like card brand and last four), never the full numbers.
- Usage information. Standard logs — pages visited, actions taken, IP address, and browser type — used for security and to keep the product working well.
2. How we use it
We use your information to:
- run the service — send documents, collect signatures, move payments, and file 1099s you request;
- send transactional email (signature requests, receipts, payment notices) via Resend;
- keep accounts secure and maintain the signature audit trail;
- answer support requests;
- understand how the product is used so we can improve it.
We do not sell your personal information. We do not share it with ad networks. Your documents are yours — we never use their contents for marketing or to train anything.
3. Who processes it (subprocessors)
Klardesk runs on a small set of trusted providers, each doing one clear job:
- Supabase — database and file storage (hosted in AWS us-east-1, United States).
- Stripe — payments, contractor identity and W-9 collection, and 1099 e-filing.
- Resend — transactional email delivery.
- Vercel — application hosting.
Each provider handles data under its own security and privacy commitments. If this list changes, we will update this page.
4. Where your data lives
Your data is stored in the United States. Our primary database and file storage run on Supabase in the AWS us-east-1 region.
5. How long we keep it
Account and workspace data are kept while your account is active. Signed documents and their audit trails are kept so you can rely on them — they are the record of your agreements. Payment and tax records are kept as long as tax law requires.
If you close your workspace, you can export your documents and records first. After that, we delete or anonymize your data within a reasonable period, except where the law requires us to keep it (for example, filed tax forms and payment records).
6. How we protect it
- Encryption in transit (TLS) and at rest.
- Row-level security in the database, so each workspace can only reach its own data.
- Role-based access inside workspaces (owner, admin, member).
- Sensitive tax IDs held by Stripe — Klardesk stores last-four only.
- A tamper-evident audit trail on every signature.
- Least-privilege access for our own systems and staff.
No system is perfectly secure, but we design so that the most sensitive data never sits with us in the first place.
7. Your rights and choices
You can access and update your account information in settings at any time. You can also email us to request a copy of your data, ask us to correct it, or ask us to delete it (subject to the legal retention rules above). If you signed a document or received a payment through a Klardesk workspace, you can contact the workspace that sent it, or reach us directly and we will help route your request.
Every marketing email includes an unsubscribe link. Transactional email (like signature requests and receipts) is part of the service itself.
8. Cookies
Klardesk uses cookies for one thing: keeping you signed in. We do not use third-party advertising or tracking cookies. Your theme preference is stored locally in your browser.
9. Children
Klardesk is a business tool for adults. It is not directed at children, and we do not knowingly collect information from anyone under 18.
10. Changes to this policy
If we make a material change to this policy, we will notify you by email or in the app before it takes effect. The date at the top always shows the latest revision.
11. Contact
Privacy questions or requests: hello@klardesk.io. We read everything.