Privacy Policy

1. Overview

WaiverApp ("we," "us," or "our") operates the WaiverApp platform, which enables businesses ("Customers") to collect electronic waivers and consent documents from their end users ("Signers"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website at waiverapp.link and the services available at app.waiverapp.link.

We do not sell your personal information to third parties — ever. We never have, and we never will.

2. Information We Collect

2a. Information from Customers (businesses using WaiverApp)

• Account registration details: name, email address, organization name, and billing information.
• Branding assets you upload (logos, colors).
• Waiver templates you create.
• Usage data such as the number of waivers signed and storage consumed.

2b. Information from Signers (end users signing waivers)

• Name, email address, and any other fields required by the waiver template (e.g., phone number, date of birth).
• Electronic signature (drawn or typed).
• ID scan data, where the Customer has enabled ID verification.
• IP address and browser user agent collected at signing time for audit purposes.
• Video watch confirmation, where the Customer has enabled a required video step.

2c. Information collected automatically

• Log data including IP addresses, browser type, pages visited, and timestamps.
• Cookies used only for authentication sessions (no tracking or advertising cookies).

3. How We Use Your Information

• To provide, operate, and improve the WaiverApp service.
• To send Signers a copy of their signed waiver by email, where the Customer has enabled this feature.
• To notify Customers of new waiver submissions.
• To process payments via our billing provider.
• To respond to support requests and communicate service updates.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

4. How We Share Your Information

We do not sell, rent, or trade personal information. We share data only with the following categories of sub-processors, strictly to deliver our service:

• Cloud infrastructure provider — an industry leading cloud provider used for infrastructure, database storage, file storage, and email delivery.
• Stripe — payment processing for Customer billing. Signers' payment information is never collected by WaiverApp.
• ID verification provider — an industry leading cloud provider used for ID document scanning, where enabled by the Customer.

We may also disclose information if required by law, court order, or government authority, or to protect the rights, safety, or property of WaiverApp or others.

Signer data belongs to the Customer. Signers' waiver data is collected on behalf of and controlled by the Customer who operates the signing portal. If you are a Signer with questions about your data, please contact the business whose waiver you signed.

5. Data Retention

Signed waiver records are retained for a minimum of seven (7) years to comply with typical legal and regulatory requirements, unless the Customer deletes them earlier or requests deletion. Customer account data is retained for the duration of the account plus 90 days following termination.

Signers may request deletion of their personal information by contacting the Customer directly. Customers may submit deletion requests to us at privacy@waiverapp.link.

6. Your Privacy Rights

Depending on your location, you may have rights including: access to your personal data, correction of inaccurate data, deletion of your data, portability of your data, and the right to opt out of certain uses. To exercise these rights, contact us at privacy@waiverapp.link.

California residents: We do not sell personal information as defined by the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). You have the right to know what data we collect, to delete it, and to opt out of sale (which we do not engage in).

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and audit logging. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

WaiverApp is not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Minor signers' data is collected only when the Customer's waiver template has minor consent explicitly enabled and configured.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify Customers of material changes by email or in-app notice. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: