Privacy

This page says what SignedExtra collects and why.

What contractors enter

Your business profile, jobs, client names and phone numbers, change orders, photos and logo. A client email is kept only as a one-way hash, never as the address. We store them on Cloudflare (D1 and R2) to run the product. There is no account. Your private dashboard link is the only key, and we keep only a SHA-256 hash of it.

What we record when a customer signs

The signer's typed name, their drawn signature, the decision, an optional reason, the time in UTC, their IP address and their browser's user agent. These go into the signed PDF so both sides have the same record. Anyone with the signing link can open that one change order and its PDF.

Usage counts

Your browser keeps a random id in local storage. Each page view sends that id, the page path, the referring site and your country to our own server, so we can count visitors. No cookies, no ad trackers.

Payments

Lemon Squeezy handles checkout as the merchant of record. We never see your card. We keep the order, the plan and a one-way hash of your email so we can confirm what you bought.

Your data

Signed records are kept so the PDF and verify page keep working. To ask what we hold or to have it deleted, reply to your purchase receipt or use the contact on the receipt.