Privacy Policy | Paperwork Max

The short version

We collect what a bill of sale needs, plus what proves it was really signed.
We do not sell your personal information, and we do not run advertising.
ID and title photos go into private storage — never a public URL — and are shared with the other party to your deal because they appear on the signed PDF.
If you use the AI features, your photos and text are sent to our AI provider to produce the result.
Email support@paperworkmax.com to get a copy of your data or have it deleted.

What we collect

Deal details	Names, postal addresses, email addresses, phone numbers, vehicle or item details, VIN, odometer reading, sale price and date — for both parties.
Signature images	The drawing you make on the signature pad, stored as an image and reproduced on the PDF.
Signing evidence	Timestamps, your IP address and browser user-agent, and the time you consented to sign electronically. This is what makes the record hold up, and it is written to an append-only, hash-chained log.
Document photos	If you choose to add them: photos of a driver's license or other ID, and photos of a title or the item.
Audio recordings	If you choose to record the conversation, the audio and your confirmation that everyone present consented.
AI inputs	Listing screenshots, vehicle photos or video frames, VINs, and messages you paste in for scoring.
Account	Your email address and a session token when you sign in with a magic link. There is no password.

We do not collect payment card numbers. If and when paid plans launch, card details will be handled entirely by our payment processor and never reach our servers.

A note on driver's license photos

A license image is sensitive identity data. Adding one is always optional — every bill of sale works without it. If you do add one, understand that it is included in the signed PDF that is emailed to both parties, because that is the point of attaching it. Only add ID you are comfortable with the other party holding.

Why we collect it

To produce your document — the details you enter are the document.
To make the signature defensible — IP, timestamp, and consent records are what distinguish a real e-signature from a name typed in a box.
To email the finished PDF to both parties.
To run the AI features you ask for.
To prevent abuse — we rate-limit by IP address so the free tools are not hammered by bots.

We do not use your deal contents to train AI models, and we do not build advertising profiles.

Who it is shared with

The other party	The whole point of a bill of sale. Everything on the document — including any ID or title photo attached to it — is visible to the counterparty and included in the PDF both of you receive.
Supabase	Database, private file storage, and the server functions that run this app.
Postmark	Sends the signing invitations and the completed-document emails.
Anthropic	Powers the AI deal scout, selling coach, and vehicle check. Photos and text you submit to those features are sent to Anthropic's API to generate the response. Audio recordings and the contents of your bill of sale are not sent to the AI.
Netlify	Serves this website.
Legal process	We may disclose records if we are legally required to, or to protect against fraud or abuse.

We do not sell or rent personal information to anyone, and we never have. If Paperwork Max were ever acquired, records could transfer as part of that business, and this policy would follow them.

Anyone with the link can open a deal

A bill of sale you create gets a link containing a long random ID. That link is the access control — there is no separate password on the document, because the other party has to be able to open it without making an account. Anyone you forward that link to can view the deal details.

Treat the link like the document itself: send it to the counterparty, and no one else.

How long we keep it, and how to delete it

Completed documents are retained so both parties can retrieve them later — that is the product. The tamper-evident signing log is append-only by design and is what gives the record its evidentiary value.

You can ask us to delete your data at any time by emailing support@paperworkmax.com from the address on the deal. Two honest caveats:

A bill of sale has two parties. We will not delete a completed document out from under the other signer without their agreement, since it is their record too. We can delete an unsigned or abandoned draft outright.
We can and will delete ID photos, title photos, and audio recordings on request, independently of the document itself.

Abandoned drafts that are never countersigned are removed periodically.

Security, and its limits

Documents and photos live in private storage that is not publicly reachable; files are only ever served through our server functions. Traffic is encrypted in transit. Access to the underlying database is restricted by row-level security and service-role keys that never reach your browser.

No system is perfectly secure, and we will not pretend otherwise. If you believe you have found a vulnerability, please tell us at support@paperworkmax.com — we would much rather hear it from you.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to not be discriminated against for exercising those rights. California residents have these rights under the CCPA/CPRA; residents of the EU and UK have them under the GDPR. We honor these requests regardless of where you live — email us and we will handle it.

This service is not directed to children under 13, and we do not knowingly collect their information.

Cookies

We do not use advertising or analytics cookies, and there is no third-party tracker on this site. We use your browser's local storage to keep you signed in and to remember your own contact details so you do not retype them on the next deal. Clearing site data removes both.

Changes

If this policy changes materially we will update the date at the top and, for anything significant, notify the email address on your account.