Your privacy at FourPoint
This policy covers https://getfourpoint.com. Abdimajid AHMED ALI is responsible for the personal information handled through this website. For privacy enquiries, contact support@getfourpoint.com.
Updates and early access
The FourPoint waitlist asks you to provide only your email address to receive project updates and early-access information. Join at https://fourpointwaitlist.vercel.app.
You can unsubscribe at any time. Once you unsubscribe, we stop sending updates and early-access emails immediately.
To request deletion of your waitlist email address, visit https://fourpointwaitlist.vercel.app/delete-request.
Requests are reviewed manually. After completing deletion, we send a final email confirming completion. This service message does not resubscribe you or restart update emails.
The external waitlist website has its own legal pages. Please review them there for information about its operation and data handling.
Contacting support
When you contact us by email or through the contact form, we use the contact details and message you provide to answer your enquiry.
Support correspondence is retained while necessary to resolve the request and handle related follow-up or a dispute. We review and delete information when it is no longer needed.
You can request deletion through support@getfourpoint.com or the contact form. If a legal obligation requires retaining specific information, we will explain the reason.
Using document tools
The 20 browser tools in FourDOC process document contents on your device, in your browser. The 12 hosted conversions described in the FourDOC guide process documents outside the browser: files are uploaded to the separate FourAPI Python service. Hosted conversions send files directly to the FourAPI endpoint on Render, configured in Frankfurt. The service processes document contents in memory and does not intentionally save uploaded or converted document files. Supabase stores separate quota counters and request metadata; it does not receive conversion document contents through this flow. Public website access uses Cloudflare Turnstile to validate a security check, followed by an opaque short-lived, single-use conversion token. Turnstile receives browser and connection information for its security checks. Permanent developer API keys are not placed in the public website. The Python worker exits after conversion or the 60-second processing deadline; upload, response transfer and parent-process memory are separate. This is not an exact secure-erasure deadline. Downloaded results remain wherever you choose to save them. Full FourAPI collection and retention information is at https://fourapi.getfourpoint.com/legal/privacy.html.
Hosted processing is subject to service availability and daily safeguards. Website conversion traffic does not pass through a FourPoint Cloudflare Worker proxy. Render, Supabase and Cloudflare provide hosting, metadata storage, delivery and security services; their infrastructure logging, backup and transfer practices apply separately. FourAPI conversion request metadata is eligible for request-driven cleanup after 30 days; this is not an exact scheduled deletion guarantee. Memory processing does not guarantee that operating-system swap, crash dumps or infrastructure logs cannot contain data.
Website contact, support, subscription and administrator-upload features have separate storage practices; document conversion does not imply those records are immediately deleted. FourPrint printing involves the selected print station and its equipment. Review the station’s practices before submitting sensitive documents.
Signature requests and temporary document storage
Self-signing stays in your browser. Creating a signature request is different: after your permission acknowledgement and a security check, the original PDF is uploaded through the FourPoint website backend to private Cloudflare R2 storage. The backend stores the signed output when the recipient confirms. Requests accept PDFs up to 5 MB and 20 pages. Larger files are rejected with a compression warning; we do not silently compress or change them. This flow is separate from the memory-only FourAPI conversions.
Supabase stores a random request identifier, hashes of the separate requester and signer capabilities, the selected page and position, creation/expiry/completion timestamps and processing status/lease. No recipient name or email is required and no invitation email is sent automatically. The signature image is processed to generate the signed PDF; it is not retained as a separate signature image file. Documents and signatures can contain personal information: use this service only when you have the necessary authority.
Unsigned requests expire after 24 hours. Completion shortens expiry to one hour after completion or the original deadline, whichever is sooner. Access is denied after expiry. A scheduled cleanup runs every 15 minutes to remove the original PDF, signed PDF and request metadata; provider failures may delay physical deletion and subsequent runs retry. Requesters can revoke access and request immediate file deletion using their private link. Keep your own copies before expiry. Daily intake counters contain only a UTC date and count and are removed after two days during a later admission.
Anyone holding a recipient link may review and sign its document. Anyone holding the separate requester link may review the result and revoke the request. These are bearer permissions, not verified identities: share links privately and never publish them. Link secrets are placed in URL fragments, removed from the address bar on opening and sent only in authorization headers, not intentionally recorded in application logs or database rows. Downloads and provider backups/logs have separate lifetimes.
A visible signature image and completion timestamp are provided. We do not verify the signer’s legal identity or issue a cryptographic document certificate. This is not offered as a qualified or advanced electronic signature service. Legal effect depends on the context and applicable law; obtain an appropriate signing service where stronger evidence or identity verification is required.
Product references
Microsoft, Word, Excel and PowerPoint are trademarks of the Microsoft group of companies. Adobe and Acrobat are trademarks of Adobe in the United States and/or other countries. Product names identify compatible document formats. FourPoint is independent and is not affiliated with, endorsed by or sponsored by these companies.
Operating the website
We process necessary technical information to deliver downloads, protect the website, and maintain its services. Our hosting and email providers may process connection, security, and delivery records.
Cloudflare provides hosting, security, and download storage. Supabase provides the application database. Brevo delivers website emails. Processing may involve countries outside your own, subject to applicable safeguards.
We use consent for optional updates. Support and operational processing rely on the applicable service-related or legitimate-interest basis.
Your rights
Depending on the processing, you may request access, correction, deletion, restriction, portability, or object to the use of your information. You can withdraw consent to updates at any time.
Contact support@getfourpoint.com. You may also submit a complaint to the CNIL at https://www.cnil.fr.
We respond to rights requests without undue delay, generally within one month. If an extension is permitted and necessary, we will explain it.
Policy changes
We update this page when our practices change and display the date of the latest revision.