Privacy Policy

Who we are

FlatWaiver is a digital waiver signing service operated for businesses (“organizations”) that collect signed liability waivers from their customers (“signers”). This policy describes what we collect from both groups and how it is handled.

Information we collect

From organization accounts: email address, password (hashed), business name, approximate monthly waiver volume, and billing information processed by Stripe. We do not store card numbers.

From signers: when you sign a waiver we collect the personal information the waiver form requests, which typically includes your name, email address, date of birth, guardian details for minors, your drawn signature image, your IP address, your browser user agent, and the date and time of signing. This information is collected because it forms the legal evidence record of your signature, and it is stored on behalf of the organization whose waiver you signed.

Electronic signature consent

Before signing, every signer is shown a consent statement and must affirmatively agree to sign electronically. Electronic signatures are recognized in the United States under the federal ESIGN Act and UETA. A copy of the exact consent text shown is stored with each signature.

Where data is stored and who processes it

Data is stored in Supabase (database and file storage). We use the following processors to operate the service: Supabase (database, authentication, file storage), Stripe (payments), Resend (transactional email), Anthropic (AI conversion of uploaded waiver documents), Vercel (hosting), and Cloudflare (bot protection on the signing page).

Advertising measurement

With your optional-cookie consent, we use the OpenAI Ads Pixel to measure completed business registrations from advertising. It uses a click reference stored in a first-party cookie for up to 30 days. Our image-only integration does not run automatic form scanning or create the SDK's browser-reference cookie. We send a random registration event identifier, not your email address, waiver contents, signatures, or signer information. Measurement is kept separate from public signing pages and signed-document screens. You can withdraw optional-cookie consent using Cookie settings.

With the same optional-cookie consent, TikTok Pixel may measure visits to selected business pages, completed business registrations, and confirmed subscription payments. Conversion data includes a random event identifier and, for payments, the amount and currency. TikTok also receives browser and network information and may use cookies to attribute visits to ads. We do not include email addresses, waiver contents, signatures, health information, or private form answers in TikTok events. TikTok tracking is excluded from public signing and signed-document pages. You can withdraw consent below.

Retention

Signed waivers are legal records and are retained until the organization that collected them deletes its account, or until a deletion request is processed manually. Signed waiver records are stored append-only for integrity; deletion is performed by our operators on request.

Data deletion requests

To request deletion of your data, email contact@flatwaiver.com. If you signed a waiver for a business, we may refer the request to that business, since it is the owner of the signed record.

Contact

Questions about this policy: contact@flatwaiver.com.