Privacy policy
Last updated 28 October 2026
Who we are
Quillora (quillora.co.uk and app.quillora.co.uk) is an online service for sending PDF documents to be signed electronically. It is operated by Adonai Technology Ltd, a company registered in England and Wales (company number 17433666), whose registered office is at 10a Chesil Street, Winchester, SO23 0HU, United Kingdom ("we", "us"). We are the controller of the personal data described in this policy, except where we say otherwise below.
If you have a question about this policy or your data, email quillora@adon-ai.net.
The short version
- We collect only what's needed to run your account, take payment and produce a signed document with a reliable signing record.
- Your documents and account data are stored in London. We don't sell your data, show ads or use tracking or analytics cookies.
- Card payments are handled by Stripe. We never see or store your card number.
- You can download or delete your documents at any time, and ask us to delete your account.
What we collect
If you have a Quillora account
- Account details: your email address and password. Your password is stored only in hashed form; we can't read it.
- Billing details: your plan, subscription status and renewal date, and the customer reference Stripe gives us. Stripe collects your card details and billing address directly.
- Documents you upload: the PDFs, their titles, where you place signature and date fields, and any recipient name, recipient email and note you enter.
- Your own signature, if you sign a document: your name, the date you choose, your signature image, the time you signed, your IP address and your browser's user-agent string.
If someone sends you a document to sign
- The name, email address and note the sender entered when preparing the document.
- When you sign: the name you type, the date you choose, your signature image, the time you signed, your IP address and your browser's user-agent string, and your agreement to sign electronically.
We record these details because they form the signing record added to the signed PDF, which is evidence of who signed and when. The sender is responsible for having a lawful reason to send you the document; we process the document's contents on their behalf.
Technical data
- Our hosting providers keep short-lived server logs (for example IP addresses and request times) to run the service securely and fix faults.
How we use it and our lawful bases
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Creating and running your account, storing your documents and producing signed PDFs | Contract: it's needed to provide the service you signed up for |
| Taking payment and keeping billing records | Contract, and legal obligation (tax and accounting records) |
| Recording signers' details in the signing record | Legitimate interests: giving the sender and signer reliable evidence that the document was signed, by whom and when |
| Sending account emails (confirming your address, resetting your password) | Contract |
| Keeping the service secure and preventing misuse | Legitimate interests |
We don't send marketing emails, and we don't use your data for automated decision-making or profiling.
Who we share it with
We use these service providers to run Quillora. They process personal data only on our instructions and under data processing agreements:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, document storage and sign-in | London, UK |
| Vercel | Hosting the website and app, and running our servers | London, UK, with a global network for delivering pages |
| Stripe | Payments and subscriptions | UK, EU and USA |
| Resend | Sending account emails | USA |
| Google Fonts, jsDelivr, cdnjs | Delivering fonts and code libraries to your browser, which shares your IP address with them | Global |
Where data leaves the UK, it is protected by UK adequacy regulations, the UK International Data Transfer Addendum or equivalent safeguards. We may also disclose data if the law requires it.
A signed document, including its signing record, is available to both the sender and the signer.
How long we keep it
- Documents and signing records: until the sender deletes them, or deletes their account. Deleting a document removes its files and makes its signing link stop working.
- Account details: for as long as you have an account. If you ask us to delete it, we delete your account and documents within 30 days.
- Billing records: six years after the end of the tax year they relate to, as UK tax law requires.
- Server logs: a few weeks at most, depending on the provider.
If a plan ends, your documents stay available to view, download and delete. They aren't deleted automatically.
Cookies and local storage
Quillora doesn't use advertising, tracking or analytics cookies. The app stores your sign-in session in your browser's local storage so you stay signed in, and remembers the name you last signed with so you don't have to retype it. These are strictly necessary for the app to work, and are removed when you sign out or clear your browser's data.
Security
Documents are kept in private storage and are only reachable through download links that expire after an hour. All traffic is encrypted with HTTPS. Signing links contain a long random code; anyone with the link can view and sign the document, so senders should share it only with the intended recipient.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of your personal data;
- ask us to correct data that's wrong;
- ask us to delete your data;
- object to, or ask us to restrict, how we use it;
- ask for your data in a portable format.
To use any of these rights, email quillora@adon-ai.net. We'll reply within one month. If you signed a document someone else sent you, we may need to involve the sender, because the document belongs to their account.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
Quillora is for adults and businesses. It isn't intended for anyone under 18.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change significantly affects how we use your data, we'll tell account holders by email before it takes effect.
Contact
Adonai Technology Ltd
10a Chesil Street, Winchester, SO23 0HU, United Kingdom
Email: quillora@adon-ai.net