Privacy Policy

Who we are

FlatWaiver is a digital waiver signing service operated for businesses (“organizations”) that collect signed liability waivers from their customers (“signers”). This policy describes what we collect from both groups and how it is handled.

Information we collect

From organization accounts: email address, password (hashed), business name, approximate monthly waiver volume, and billing information processed by Stripe. We do not store card numbers.

From signers: when you sign a waiver we collect the personal information the waiver form requests, which typically includes your name, email address, date of birth, guardian details for minors, your drawn signature image, your IP address, your browser user agent, and the date and time of signing. This information is collected because it forms the legal evidence record of your signature, and it is stored on behalf of the organization whose waiver you signed.

Electronic signature consent

Before signing, every signer is shown a consent statement and must affirmatively agree to sign electronically. Electronic signatures are recognized in the United States under the federal ESIGN Act and UETA. A copy of the exact consent text shown is stored with each signature.

Where data is stored and who processes it

Data is stored in Supabase (database and file storage). We use the following processors to operate the service: Supabase (database, authentication, file storage), Stripe (payments), Resend (transactional email), Anthropic (AI conversion of uploaded waiver documents), Vercel (hosting), and Cloudflare (bot protection on the signing page).

Retention

Signed waivers are legal records and are retained until the organization that collected them deletes its account, or until a deletion request is processed manually. Signed waiver records are stored append-only for integrity; deletion is performed by our operators on request.

Data deletion requests

To request deletion of your data, email support@example.com. If you signed a waiver for a business, we may refer the request to that business, since it is the owner of the signed record.

Contact

Questions about this policy: support@example.com.