Intake
Privacy Policy
What we collect, why we collect it, and what you can ask us to do about it.
This is a starter policy. It describes how the software behaves by default. Review it against your own practices and jurisdiction before publishing.
What we collect
- Account details — name, email address and a hashed password for anyone who signs in.
- Client records — the contact details a business enters about the people it collects documents from.
- Uploaded content — the documents, answers and signatures submitted through a portal link.
- Technical records — IP address and timestamp at the moment of a submission, kept as part of the audit record.
Why we collect it
To operate the service: to show a business what it has been sent, to prove when and by whom something was submitted, and to send the notifications the service exists to send.
Where it is stored
Uploaded files are stored privately and are never publicly reachable. Every download passes through an authorization check and a short-lived signed link. Where the files physically sit depends on how the installation is configured.
How long we keep it
For as long as the business using the service keeps it, or until deletion is requested. Deleting a client removes their requests, files and submissions.
Your rights
You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Write to the address in the footer and we will respond within a month.
Cookies
We use a session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.