HOMIES PAPERWORK
Users can create an individual account at /signup or POST /v1/accounts. Account ownership is established by API-key possession; names are not verified identities. Account labels and hashed keys are stored privately. Signup quotas retain pseudonymous daily address hashes. Only use forms you are licensed to use. Your access key is stored as a hash. Deal details are processed to produce your requested drafts; this service makes no model calls.
Generated PDFs are stored in private Vercel Blob storage. Download links expire after 15 minutes. The link itself grants access to that PDF during this period; share it only with intended recipients. Expiry blocks downloads but is not a promise of immediate physical deletion. Use DELETE /v1/files/{documentId} through the REST API, or the delete_document connector tool, to delete a generated file.
Uploaded signback originals, instructions, revisions and review records are stored privately. Access expires after 24 hours; expiry is not a promise of immediate physical deletion. DELETE /v1/signbacks/{id} deletes the PDF bytes and review content while retaining a minimal deletion record to prevent concurrent requests from restoring access. The application does not log request bodies, access keys or PDF contents. Hosting providers may retain operational request metadata. Your connected AI provider receives the deal facts and tool results according to your account settings.
BCFSA terms acceptance records store your member ID, credential version, terms version and hash, and server acceptance time. Each key belongs to one end user; a harness serving multiple people must use individual user credentials. BCFSA form-use terms.
Use only forms you are licensed and authorized to use. Form revisions are identified explicitly. Drafting produces unsigned files. The separate signing flow stores frozen PDFs, recipient names/emails, consent, typed signatures, timestamps and network addresses in private storage. It sends invitations from the member’s connected Google account only through an explicit send call. Signing records persist independently of draft/signback deletion; invitation expiry does not delete them. Signing records expire at their configured retention deadline (365 days by default); access closes at that deadline and scheduled cleanup erases the content. Physical cleanup may take longer during a backlog or outage. Save completed PDFs and JSON audit receipts before that deadline. DELETE /v1/signing/envelopes/{id} revokes access immediately and erases signing content; minimal metadata and empty storage tombstones remain to prevent restoration by concurrent requests.