Privacy Policy

We collect three categories of information:

• Account information— name, email address, business name, timezone, and other details you provide when creating an account.
• Customer Content— information you submit through the Service, including signed waivers, signer names, dates of birth, signatures, photos, optional driver's-license scans, IP addresses captured at signing time, and answers to custom waiver questions.
• Usage and device information— IP address, browser type, device identifiers, pages visited, and timestamps, collected via cookies, analytics, and server logs.

We use information to: provide and operate the Service; produce compliance-ready audit packets on behalf of our customers; bill and process payments; respond to support requests; detect and prevent fraud or abuse; comply with legal obligations; and improve and develop new features.

We share information only with: (a) service providers that help us operate the Service (for example, payment processors, email providers, cloud infrastructure, analytics); (b) parties to whom you direct us to share (for example, FFL point-of-sale integrations, CRM systems, or affiliate partners you have opted-in to); and (c) legal authorities when required by law or to protect the rights, property, or safety of SaaSMosaic, our customers, or the public. We do not sell personal information.

We rely on third-party subprocessors to operate the Service, including but not limited to: Amazon Web Services (hosting + storage), Stripe (payments + billing), Resend (email delivery), Twilio (SMS), Cloudflare (DNS + CDN), and Sentry (error monitoring). Each is bound by a data processing agreement.

We retain Customer Content for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting, and audit obligations. Signed-waiver records and audit packets are typically retained for the longer of (a) the duration of your subscription, or (b) the limitations period applicable to claims arising out of the underlying business activity, so that they remain available for legal use. You may request deletion of your account and associated Customer Content at any time by emailing sales@saasmosaic.com.

Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal information. To exercise these rights, contact sales@saasmosaic.com. We will respond within the timeframes required by applicable law.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request its deletion. We do not sell personal information as defined by the CCPA.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 except as Customer Content submitted by an adult parent or legal guardian (for example, when signing a minor onto a range waiver). If you believe we have collected such information outside that context, contact us at sales@saasmosaic.com.

We use industry-standard administrative, technical, and physical safeguards, including TLS for transport encryption, server-side encryption at rest on S3, row-level security policies in the database, and append-only audit logging. No system is perfectly secure, and we cannot guarantee the security of any information transmitted to or stored in the Service.

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by an in-product notice.

SaaSMosaic LLC · 120 19th St N, Ste 201 PMB 303316, Birmingham, AL 35203-3219, US · sales@saasmosaic.com