Waivelo Privacy Notice
Operator: JC&X SOLUTIONS LLC (Florida) | Privacy contact: support@waivelo.com
1. Who we are and who this notice covers
Waivelo is a service operated by JC&X SOLUTIONS LLC, a Florida limited liability company ("Waivelo," "we," or "us"). It helps U.S.-based business customers configure waiver forms, collect signatures, produce signed records and PDFs, and manage related visits, check-in, waitlists, and staff accounts. Questions about this notice or privacy requests can be sent to support@waivelo.com.
A business customer generally determines what its waiver asks and why it collects participant information. Waivelo provides the technology to process the information on the business’s behalf and also handles business-account, security, support, and billing information for its own service operations. The precise legal responsibilities of the parties depend on the applicable law and facts.
2. Information we process
Business and staff accounts: names or identifiers, email addresses, organization and location information, membership roles, invitations, login/session data, and relevant account activity.
Waivers and participants: waiver text and published versions, participant names, business-configured contact details and form answers, presented consent/attestation wording, signature strokes, signing times, signed documents, document hashes, and associated organization/location information.
Guardian signing: if enabled by a business, one minor participant’s name; the adult signer’s name, declared relationship, authority attestation, signature strokes, and signing time. The built-in guardian flow does not request the child’s email address, phone number, date of birth, or identity documents. A business may independently configure additional waiver questions, for which the business is responsible.
Operations and security: visits, check-in and waitlist entries, audit and authorization events, session cookies, server logs, and available request information. A signed submission may include the IP address from a trusted request header and a browser/device User-Agent string, which the reviewed implementation limits to 300 characters.
Billing and subscription authorization: business billing information provided for Stripe Checkout; Stripe customer, subscription and invoice-status references; trial, cancellation and recovery dates; and records showing who authorized a subscription, when, the commercial disclosure, and accepted policy versions. Payment card numbers are collected by Stripe, not stored in Waivelo’s application database.
Support correspondence: the sender’s email, message, optional attachments, and our replies when someone contacts support.
3. How information is used
We process information to operate and secure accounts; publish and present Customer waivers; record signatures and preserve signed evidence; create and retrieve PDFs; manage staff access, check-in, visits, waitlists and audit trails; administer trials and authorized subscriptions; respond to requests; investigate abuse or errors; maintain the service; and comply with applicable legal obligations.
4. Information sources and disclosures
Information may come from a business account holder or staff member; an adult signing a waiver, including a guardian acting on behalf of a minor; service interactions and request metadata; or billing and communication providers. We share information with providers to the extent needed to operate the service, enforce security, or fulfill authorized operations. These providers include Supabase (authentication, database and private document storage), Netlify (hosting), Resend (authentication email), Zoho Mail (support correspondence), and, when billing is enabled, Stripe (payment and subscription services). Provider practices and retention are also governed by their own terms.
Information may also be disclosed when legally required, to respond to valid legal processes, or when reasonably needed to protect rights, safety, security, or service integrity, subject to applicable law. We do not promise that provider technical logs or copies are identical to application records.
5. Data protection and access
The reviewed application uses account authentication, organization-scoped access rules, server-side authorization and private storage for signed PDFs. We take reasonable measures appropriate to the service, but no technical safeguards guarantee absolute security. Authorized business personnel can access their organization’s records according to assigned permissions; public signing is handled through the applicable waiver flow.
6. Retention, cancellation, and deletion
Signed waiver versions, submissions, PDFs, and certain audit records are designed as immutable records of what was signed and when. We do not automatically erase them when a subscription is canceled or expires. We retain information as necessary for service delivery, authorized record access, disputes, legal requirements, security, and other legitimate operational purposes, subject to applicable law.
Customers may request account closure, available exports or deletion through support@waivelo.com. We verify authority and evaluate each request individually. Some information may need to be preserved, including signed evidence and related audit records, even after operational access ends. Residual copies may remain in provider backups or logs according to their retention processes. No general automatic deletion process or fixed deletion timetable is represented here.
7. Participant and privacy requests
A person seeking access to, correction of, or deletion of information submitted to a particular business’s waiver should ordinarily contact that business first, because it decides the waiver content and collection purpose. Businesses, staff users, and adults acting for a minor may also send inquiries to support@waivelo.com. We will review identity and authority as appropriate, coordinate with the relevant business when necessary, and handle rights available under applicable law. Some requests may be limited by legal retention or other permitted exceptions.
8. Children and parent/guardian signing
Waivelo is provided to businesses, not as a service for children to open business accounts. Where a Customer enables guardian signing, the adult supplies the minor participant’s name and signs as the declared parent or legal guardian. The declaration is not independent verification of identity, age, custody or authority. Businesses are responsible for determining whether their use and additional information requests comply with applicable children’s privacy and waiver laws.
Whether laws such as the Children’s Online Privacy Protection Act apply depends on how a particular site or service collects and uses children’s information; the presence of an adult signer alone does not establish an exemption. Requests about minors’ information can be directed to the business or support contact above.
9. Cookies and service technology
Waivelo uses authentication/session cookies for staff sign-in. In the reviewed implementation, production authentication cookies are configured with HttpOnly, Secure, and SameSite=Lax attributes, subject to the authentication provider’s behavior.
10. U.S. customer scope and third-party systems
Waivelo currently intends to serve businesses based in the United States. This is a commercial eligibility rule, not a representation that information never leaves the United States or that all providers store data in the same country. Service providers may handle information according to their actual hosting regions and contractual arrangements.
11. Changes to this notice
Effective date: 2026-10-20. Version: 1.0. We may update it to reflect service, operational or legal changes, and will provide notice and seek consent when required by applicable law. Questions and privacy requests: support@waivelo.com.