Effective: September 7, 2026
Free form generators
Form fields, line items, calculations, PDF creation, Word creation, printing, and JSON export run in your browser. We do not receive or store those entries through the normal free generator flow.
Optional device profile
If you choose “Save business on device,” basic business fields are stored in your browser’s local storage. They remain on that device and browser profile. You can clear them using browser controls. This is not cloud storage or a backup.
Accounts and Pro data
If you create an account, we store your email and a password hash. If you subscribe to Pro and choose to save data, we store the business profile, clients, document history, recurring templates, and brand settings you submit. Those records are scoped to your signed-in account. Sign out on a shared device. Delete saved records from the account workspace when you no longer need them.
Payments
Pro billing is processed by Stripe. We store Stripe customer and subscription identifiers and status so we can unlock or lock Pro features. We do not store full payment-card numbers. Stripe’s privacy notice applies to the payment data they process.
Data you should not enter
Do not place Social Security numbers, tax account credentials, full payment-card numbers, bank account numbers, passwords, health information, identity documents, or other highly sensitive data in these forms. Use purpose-built secure systems when that information is required.
Technical requests
Like most hosted websites, infrastructure providers may process request data needed for security and delivery, such as IP address, browser type, requested URL, and timestamps. We do not intentionally place form-field contents in URLs or analytics events.
Analytics and advertising
No behavioral advertising or ad network is enabled in this launch build. If enabled in your deployment environment, analytics are sent to Google Analytics 4 with pageview events and form-level actions only (for example: form started, export attempted, export completed). We do not send form field values or document contents in these events. Ads, if ever used, will not appear inside the form editor or finished document.
Agent API
The public REST and MCP evaluation surfaces remain unauthenticated. Do not send highly sensitive data there. Authenticated API keys, retention controls, and API billing are not part of this Pro launch.
Contact
Privacy questions can be sent through the contact page. Do not include completed forms or client information.