1. Definitions

1.1 “Documents”
Any files, waivers, contracts, forms, acknowledgments, agreements, or materials uploaded, created, or signed using Natty Hatty Signature.

1.2 “Audit Trail”
The metadata and activity record associated with a Document, including timestamps, IP addresses, device details, access logs, and signature events.

1.3 “Customer”
The business, facility, or organization that uses Natty Hatty Signature to collect electronic signatures.

1.4 “End User / Signer”
Any individual who signs or otherwise interacts with a Document via Natty Hatty Signature.

2. Retention Overview

Natty Hatty retains Documents and associated audit trails for as long as the Customer’s account remains active, unless:

• The Customer deletes the Document

• The Customer’s organization deletes the Document

• The Customer submits a deletion request

• Account termination triggers automated deletion

• Law requires longer retention

Natty Hatty does not delete Documents automatically based on arbitrary timelines unless required by law or customer action.

3. Default Retention Periods

3.1 Documents (Waivers, Forms, Contracts)

• Retained indefinitely while the Customer’s organization account remains active.

• If the Customer deletes a Document manually, the Document ispermanently deleted within 30 days.

• If the Customer account is terminated, Documents are deleted within30 days, unless required for legal, security, or fraud-prevention purposes.

3.2 Audit Trails

Because audit logs are essential for legal validity:

• Retained for the entire life of the associated Document.

• Retained for at least 7 years after Document deletion when required for:

  • Fraud prevention

  • Legal claims

  • Dispute resolution

  • Compliance (ESIGN, UETA, eIDAS-aligned)

Audit trails may outlive the Document content where required for regulatory or legal evidence.

3.3 Signature Certificates

• Retained as long as the Document exists

• Deleted when the Document is permanently deleted

• May be preserved for 7 years if required for legal defense

3.4 System Logs

• Access logs: up to 12 months

• Security logs: up to 24 months

• Authentication logs: up to 36 months

4. Customer-Controlled Retention

Organizations using Natty Hatty may:

• Delete individual Documents at any time

• Set internal policies for how long they keep waivers

• Request bulk deletion via

  legal@nattyhatty.com

• Export Documents before deletion

• Maintain their own offline backups as needed

Natty Hatty honors deletions but may retain certain metadata as required by law (fraud, tax, compliance).

5. Auto-Deletion Triggers

Documents and associated data are permanently deleted when:

5.1 Customer Account Termination

• Data is deleted within 30 days of termination

• Certain logs may be retained for legal obligations

5.2 Legal Obligation

If we are required by:

• Law enforcement requests

• Court orders

• Regulatory requirements

Certain data may be retained for longer periods as legally required.

5.3 Deletion Requests

Verified Customer or Signer requests may result in deletion within 30 days, except where:

• The Customer (business) is the controller

• Law requires retention

• Fraud-prevention requires retention

6. Exceptions for Legal Compliance

Natty Hatty may retain Documents or audit trails longer when required for:

• ESIGN UETA record-keeping

• Transaction verification

• Child safety laws (COPPA)

• Tax and financial record obligations

• Security investigations

• Defense against legal claims

Retention may extend up to 7 years or as required by jurisdiction.

7. Document Integrity and Storage

All Documents and associated signatures are stored:

• Encryption at rest

• Encryption in transit

• With tamper-evident hashing

• In secure AWS cloud infrastructure located in the United States

Document integrity and traceability are preserved for the duration of retention.

8. Document Export

Customers and End Users may export:

• Signed Documents (PDF)

• Audit trails

• Certificates of completion

• Version histories

To export or request a full retention report, contact:

9. Customer Responsibilities

Customers are responsible for:

• Knowing which documents require long-term storage

• Determining legal retention periods for their specific jurisdiction

• Downloading or exporting documents for offline storage

• Ensuring compliance for liability waivers, medical waivers, and minors

• Notifying Natty Hatty before terminating accounts to prevent accidental data loss

Natty Hatty is not responsible for Customer-initiated deletions.

10. Changes to This Policy

We may update this Policy periodically to reflect changes in:

• Laws

• Best practices

• Natty Hatty’s system architecture

When changes occur, we will:

• Update the “Last Updated” date

• Notify Customers for material changes

11. Contact

For questions, deletion requests, exports, or compliance inquiries: