Privacy policy

What we collect

• Your account: your name, email, company details, logo, and your team members’ names and emails.
• What you put in: jobs, clients’ and subs’ names and contact details, change orders, invoices, payments you record, photos, and the files your subs upload (insurance certificates, W-9s, lien waivers).
• Signature records: when someone signs, their name, email, the time, IP address, device and browser details, and a fingerprint of the document. This is what makes the signature hold up.
• Activity: when documents are sent, opened, signed or paid, and which reminders went out, so you can see it in your activity log.
• AI Assist: the notes you type, the emails you forward to your PaperForeman address, and, if you use voice notes, the words from them (we don’t keep the audio).
• Website messages: what you send through the contact form.

We do not collect card or bank account numbers. Your clients enter those directly with Stripe, and Stripe keeps them.

Cookies

We use a sign-in cookie to keep you signed in, and a cookie that opens the read-only demo if you choose to try it. That’s all. No advertising cookies, no tracking pixels, no third-party analytics.

Who helps us run PaperForeman

These companies process data for us, only to provide their part of the service:

• Railway: hosting, database and file storage.
• Stripe: your subscription, and your clients’ online payments through your Stripe account.
• Resend: sending and receiving email.
• Anthropic: reading AI Assist notes and emails, and reading insurance certificates your subs upload.
• Deepgram: turning voice notes into text, only if voice notes are turned on for your account.

We don’t sell personal information, and we don’t share it with anyone else except when the law requires it.

How long we keep it

We keep your company’s data while your account exists, including after you cancel (your account turns read-only, so your records are still there if you come back). If you want your account and its data deleted, ask us through the contact page from the account owner’s email and we’ll delete it within 30 days, except records we must keep by law (like billing records). The public demo account holds made-up data only and is reset every night.

Security

Every page runs over an encrypted connection. Data and files are encrypted where they’re stored. Files open through short-lived private links, and every company can only ever reach its own data. Signed documents are sealed with a SHA-256 fingerprint so any later change shows.

Your choices and rights

You can see and change your data in the app at any time, and download the PDF of every change order, invoice and signed document. For a full copy of your data, a correction or deletion, ask us through the contact page. If you’re a client or sub of one of our customers and want your information changed, ask the contractor who sent you the document; they control that data, and we’ll help them.

Children

PaperForeman is a business tool for adults. We don’t knowingly collect information from anyone under 18.

Changes

If we change this policy in a way that matters, we’ll email account owners before it takes effect and update the date above.