Privacy policy
Furvur Inc. ("we") operates WaiverBee. This policy explains what data WaiverBee handles, why, and for how long. It applies to this website, to merchants who install the app, and to people who sign through it.
Our role
For merchants and this website, we are the controller of the data.
For signers, the merchant is the controller and we are the merchant's processor. The merchant decides what to ask you and why. If you signed a document, send your questions to that merchant first. Their own privacy notice also applies. Our terms set out how we act for merchants.
This website
This website uses no analytics, no advertising and no cookies. If you change the theme, your browser stores that choice on your device. Our host, Cloudflare, handles each request and may keep basic technical logs, such as IP addresses, to run and secure the network.
Data from merchants
- Your shop domain, shop name, time zone and shop email
- Shopify access tokens, which let the app work with your store
- Your documents, fields and settings
- Your Reply-To address and email settings
- Install, uninstall and plan details
Data from signers
| Data | Why |
|---|---|
| Name, email and any other values entered, such as phone, address, date of birth, medical information or emergency contact | The merchant's document asks for them |
| Signature and initials, drawn or typed | To sign the document |
| Uploads, such as a photo, an ID or a file | The merchant's document asks for them |
| IP address and user agent (browser and device) | Evidence on the certificate page, and abuse limits |
| Date and time, the consent text accepted, document version and hashes | Evidence of what was signed, and when |
| Shopify order ID, customer ID, and the order's name and email | To link a signature to an order, and to show unsigned orders |
| Email requests, reminders and one-time codes | To send signing links and copies, and to confirm a returning signer |
Signers may enter details about a minor if a merchant's document asks for them. Only a parent or guardian should enter those details. The merchant is responsible for that document.
We do not sell personal data. We do not use signer data for advertising. We do not use it to train AI models.
Subprocessors
| Provider | What it does | Data |
|---|---|---|
| Cloudflare | Hosting, database, file storage and queues | All data above |
| Shopify | The platform the app runs on, and the storefront path to signing | Shop, order and customer data, and signer requests that pass through the store |
| Anthropic | AI suggestions for field positions | The merchant's uploaded PDF, only if it has no fillable boxes. Not signed records |
| Broadcast | Our own email platform, which prepares and tracks app emails | Recipient email, shop name and email content |
| Postmark | Email delivery | Recipient email and email content |
| Fastmail | Our support mailbox | What you send to [email protected] |
These providers may process data outside your country.
How long we keep data
- Signed records and uploads: while the merchant keeps WaiverBee installed, unless a redaction request removes them sooner. There is no automatic expiry. A waiver's validity period does not delete it.
- Links to files: short-lived. A signer's copy link lasts 30 days. The My waivers page opens only with an email code.
- After uninstall: we drop the access tokens at once. Shopify sends a shop redaction request about 48 hours later, and we then erase the shop's data and files. If the merchant has reinstalled by then, the data stays.
Customer redaction and data requests
When a merchant or Shopify asks us to redact a customer, we:
- clear that person's name, email, phone, date of birth, customer ID, IP address, user agent and entered values;
- delete their signed PDFs and uploads;
- clear their pending requests, so no more reminders go out;
- clear their email from stored orders and delete their one-time codes.
We keep the record that a signature took place, with its document, version, time and hashes. That entry no longer names a person.
When Shopify sends a customer data request, we log that it arrived. The merchant answers it from the Signatures list and export.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, or to object to how it is used. Signers should ask the merchant, who controls that data. Merchants and website visitors can email us. You may also complain to your local data protection authority.
Security
All traffic uses HTTPS. Signing links carry signed tokens. Files stay private and open only through short-lived links. Each shop's records are stored apart from those of other shops. No system is perfectly secure, so tell us if you find a problem.
Changes
We will update this page when our practices change, and we will change the date at the top. If you do not accept a change, stop using WaiverBee.
Contact
Furvur Inc. Email [email protected].