Privacy

Last updated October 19, 2026

SepiaDoc and sepiadoc.com are run by Mako Logics LLC, a Texas limited liability company ("we"). This page says what we collect, why, and who else sees it. Questions: support@sepiadoc.com.

The SepiaDoc app

Your documents stay on your computer. SepiaDoc does not upload documents, has no account, and collects no usage data. It connects to the internet only to check for SepiaDoc updates: by itself about once a day, and whenever you press Check for updates. You can switch the daily check off in Help > About, and an organization can switch it off for all of its computers. The check goes to our download server (download.sepiadoc.com, run on Cloudflare), or to GitHub, where our installers are also published, if ours can't be reached. It sends nothing about you or your documents; like any request on the internet, those servers see your connection's IP address, and we don't keep a record of it. A new version is downloaded from the same places, confirmed as signed by Mako Logics LLC, and installed when you close SepiaDoc. Details you save in SepiaDoc (such as your name, address and signatures) are stored on your computer, encrypted to your Windows account. Business License keys are checked on your computer; we never see when or where a key is used.

This website

Visits

When you open a page we record the page's address, the website that linked to it (only its name, like google.com), and the country your connection comes from. We don't record your IP address, we don't set cookies for this, and we keep these records for up to 13 months. We also use Vercel Analytics and Vercel Speed Insights, which count visits and measure page speed without cookies and without identifying you.

Messages and "email me" requests

When you write to us or ask us to email you when SepiaDoc is ready, we keep what you send (your name, email, company and message), along with a scrambled code for the network you wrote from so we can stop floods of messages. We use it only to answer you or send that one email.

Buying a Business License

When a business buys, we keep the buyer's email, name and business name, the order (number of people, price, dates) and the licence key we issued. Payment is handled by Stripe: card details go straight to Stripe and never reach us. Stripe's privacy policy is at stripe.com/privacy. Receipts and invoices are produced by Stripe.

Your account

You sign in with a link we email you; there's no password. Signing in sets one cookie that keeps you signed in for up to 30 days, and signing out ends it everywhere.

The "are you a person" check

Our forms use Cloudflare Turnstile to keep out automated spam. Cloudflare processes some information about your browser to do this, under its own privacy policy (cloudflare.com/privacypolicy).

Email

We send email (licence keys, sign-in links, replies) through Cloudflare's email service.

Who else sees it

Only the companies named above, each for the job described: Stripe (payments), Cloudflare (spam checks and email), Vercel (hosting and visit counts) and Supabase (where the website stores its records, in the United States). We don't sell or share personal information, and we don't use it for advertising.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to delete it, by writing to support@sepiadoc.com. We keep order records as long as tax and accounting law requires. California residents have these rights under the CCPA; we don't sell or share personal information as the CCPA defines it.

Children

sepiadoc.com isn't aimed at children under 13, and we don't knowingly collect their information.

Changes

If we change how we handle information, we'll update this page and its date.