Last updated: May 4, 2026
Privacy Policy
SigningOS is built for loan signing agents. This policy explains what data we collect, how we use it, and how you can control it.
1. What We Collect
Account Information
When you create an account, we collect your email address and a hashed password. We use Supabase for authentication.
Signing Order Data
Orders you create — including borrower names, property addresses, signing dates, loan types, and notes — are stored locally on your device using SQLite and optionally synced to your Supabase account for backup. This data is yours and is never sold or shared with third parties.
Financial Data
Invoice amounts, payment status, mileage, and expense records you enter are stored locally on your device and in your account. We do not have access to your bank accounts or payment processing credentials.
Credential Information
Expiration dates you enter for your notary commission, E&O insurance, NNA certification, and other credentials are stored locally and used solely to send you expiration reminders via push notification.
AI Assistant Usage
Messages you send to the AI signing assistant are transmitted to our API to generate a response. We do not permanently store your assistant chat history on our servers.
Usage & Diagnostics
We collect anonymized crash reports and basic usage telemetry to improve app stability. This data does not contain personally identifiable information.
2. How We Use Your Data
- To operate the app and sync your orders across devices
- To send push notifications for credential expirations and signing reminders
- To provide the AI signing assistant feature
- To process and verify subscription purchases via RevenueCat
- To diagnose crashes and improve app performance
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 3.
3. Third-Party Services
4. Data Storage & Security
Your signing order data is stored locally on your device using encrypted SQLite. Cloud sync uses Supabase with row-level security — only your account can access your data. We use HTTPS for all network communication.
5. Your Rights
- Delete your account — Contact us to permanently delete your account and all associated cloud data.
- Export your data — Your order data is stored locally on your device and accessible to you at any time.
- Opt out of push notifications — Disable notifications in iOS Settings at any time.
6. Children
SigningOS is not directed at children under 13. We do not knowingly collect data from children.
7. Changes to This Policy
We may update this policy as the app evolves. We will update the "Last updated" date at the top. Continued use of the app constitutes acceptance of the revised policy.
8. Compliance Standards
SigningOS does not claim CFPB certification. No such certification exists for software tools, and we will not pretend otherwise. Instead, the app is built to align with the standards and regulatory guidance that actually apply to handling borrower data.
We follow:
- FTC Safeguards Rule (16 CFR Part 314, revised 2023)
- GLBA Privacy Rule (15 U.S.C. sections 6801 to 6809)
- CFPB Bulletin 2012-03 and Bulletin 2016-02 (third-party service provider expectations)
- NSA Code of Conduct, published by the National Notary Association
- CCPA and other applicable state privacy laws
Full security control documentation is at signingos.app/security. Subprocessor list at signingos.app/subprocessors.
For vendor due diligence requests, contact support@signingos.app.
9. Contact
Questions about this policy or requests to delete your data:
support@signingos.app