ServiceSeal

ServiceSeal Privacy Policy

Version 1.1 (privacy-1.1) · Effective date: October 16, 2026

Bravo Sierra Tech LLC, a Kentucky limited liability company doing business as ServiceSeal (“ServiceSeal,” “we,” “us,” or “our”), provides the ServiceSeal mobile application, the serviceseal.app website, and related support services (collectively, the “Service”). This Privacy Policy explains how we handle personal information through the Service.

ServiceSeal is designed for adults using it for a trade or business in the United States. It is not a consumer marketplace, payment processor, law firm, or customer relationship management system.

1. Your records: on your device, and backed up to our servers

ServiceSeal keeps a user’s records on the user’s device, so the application works without a network connection. Whenever the device is connected, the application automatically backs those records up to our servers, hosted by our service provider Supabase in the United States, so that the user can restore them by signing in on another device. The backup is part of the Service and cannot be turned off. It includes:

  • the business profile and logo, and the user’s payment links;
  • every agreement, with its scope, line items, prices, tax and deposit details, terms, notes, changes, completion and payment records, signer names, and signature images; and
  • the details of the user’s customers recorded in those agreements: name, phone number, email address, and service address.

Records created or changed while the device is offline stay only on the device until it reconnects. The application shows when it last backed up.

Account authentication and policy acceptance are handled separately: the user’s email address and related authentication records are processed through our authentication provider so the user can create and access an account. When a user accepts our Terms and acknowledges this Policy, we keep a server-side record of the Terms version, Privacy Policy version, acceptance date and time, acceptance channel, application version, and platform. Website forms and support communications are also sent to systems we control or use.

ServiceSeal does not send documents to a user’s customers. A user controls documents shared through the device’s share sheet, messaging applications, email, printing, or other third-party services.

2. Information we handle

Category Examples Main purposes
Account, business profile, and policy acceptance Email address, first name, business name, trade, business contact details, address, license number, logo, preferences, account identifiers, accepted Terms and Privacy Policy versions, acceptance date and time, acceptance channel, application version, and platform Create and secure the account; personalize documents; back up and restore the profile; provide support; and document acceptance. Authentication credentials are handled by our authentication provider; we do not see a plaintext password
Agreement and customer content Job title and scope, service address, line items, prices, tax and deposit details, customer name and contact details, terms, signature image, signer name, consent text, dates, changes, notes, completion and payment records Create, organize, seal, display, export, and share records at the user’s direction; back them up and restore them to the user’s devices
Subscription information Trial dates, product or plan, entitlement status, renewal status, and limited transaction identifiers Provide trial or paid features and manage access. Apple or Google processes payment credentials; we do not receive full card or bank details
Website and communications Email address and anything submitted through a website form, communication preferences, and submission date Respond to the person and send messages they asked for
Support and communications Messages, attachments, account email, and information supplied to diagnose a problem Respond to requests, troubleshoot, protect the Service, and keep appropriate support records
Technical and security information IP address, browser or device type, app version, a random identifier for the application’s installation, request times, authentication events, error information, and security logs Deliver the Service and its application updates, secure it, prevent abuse, diagnose failures, and comply with law

The application does not request precise location, create a persistent hardware identifier, or include advertising, analytics, or crash-reporting software. We do not use agreement content or signatures to train general-purpose or public AI models.

To deliver application updates, the application creates one random identifier for its installation. It is not derived from the device or the account, and our update provider uses it only to deliver updates and count the installations that receive them.

The website may use cookies or browser storage that are strictly necessary for security, form operation, or preferences. We do not use advertising cookies or pixels. If optional analytics or advertising technologies are introduced, we will update this Policy and provide any choice required by law before using them.

Contacts and device permissions

If a user taps Choose from contacts, ServiceSeal requests only the access needed for that action. The user selects one person, and the selected name and contact details are copied into that agreement, and backed up with it. ServiceSeal does not bulk-import an address book or create a separate customer database. Android may require contacts permission; on supported Apple devices, the system contact picker can provide the selected contact without granting general address-book access.

The application may also use files, photos, local storage, and sharing functions when the user chooses a logo, captures a signature, exports data, or shares a document. The operating system and destination application govern information after the user directs it there.

3. How we use information

We use personal information to:

  • provide, maintain, secure, and improve the Service;
  • create accounts, authenticate users, and provide offline access;
  • back up users’ records and restore them to their devices;
  • perform actions the user requests, including generating, sealing, exporting, and sharing records;
  • administer trials and subscriptions;
  • respond to support, privacy, and deletion requests;
  • send service messages, and marketing messages the recipient has permitted;
  • detect fraud, misuse, and security incidents; and
  • comply with law and protect the rights and safety of ServiceSeal, our users, customers, and others.

We may use information that has been aggregated or deidentified so it cannot reasonably identify a person, such as counts of records. We do not sell personal information for money or share it for cross-context behavioral advertising.

4. When information is disclosed

We disclose information only as reasonably necessary in these situations:

  • Service providers. Providers supporting authentication, database hosting, and backup (Supabase); subscription entitlement management (RevenueCat); website hosting and delivery of account emails (IONOS); and delivery of application updates (Expo). They receive only the information needed for their function, and process it on our behalf. We require providers we engage to protect personal information consistently with this Policy and applicable law.
  • App platforms. Apple and Google may process app-distribution, device, diagnostic, purchase, and subscription information under their own terms and privacy policies. We receive only the information they make available to operate the Service.
  • At the user’s direction. A document or export may be sent to a customer, email provider, messaging application, cloud drive, printer, or other destination the user selects.
  • Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, legal process, or a valid government request; protect rights or safety; investigate fraud or misuse; or establish, exercise, or defend legal claims.
  • Business transactions. Information may transfer as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate confidentiality and notice requirements.
  • With consent. We may disclose information for another purpose when the affected person or authorized business has consented.

We do not authorize service providers to use customer agreement content for their own purposes, including advertising.

5. Professionals, customers, and responsibility for customer data

The ServiceSeal account holder is generally the business responsible for deciding what customer information to enter and why. When ServiceSeal backs up or otherwise processes that information, we act on the business user’s instructions, except where law makes us independently responsible.

A customer who signs or is named in a ServiceSeal document does not thereby create a ServiceSeal account or become a party to the user’s terms with ServiceSeal. Customers should direct requests about a professional’s job record to that professional; we do not access the contents of a user’s records to respond to them.

The application lets the professional remove a customer’s name, phone number, email address, signer name, and signature image from every agreement that names that customer. The service address, job details, prices, and dates remain, because they are part of the sealed record, and the seal is designed to stay verifiable without the removed details. After removal the record no longer shows who signed. The removal reaches the backup the next time the device backs up. Documents already shared cannot be recalled.

Customer-detail removal may be deferred for an agreement the professional has placed on a good-faith, active dispute hold or must preserve for a legal claim. The professional is responsible for using a hold only while reasonably necessary and clearing it when the reason ends. A hold affects customer-detail removal from that agreement; it does not prevent the professional from deleting the entire ServiceSeal account and its records, including the backup.

Users must have a lawful basis and any required notice or permission before entering another person’s information or asking that person to sign.

6. Retention and deletion

Records are kept on the user’s device and in the backup until the user deletes them or the account. Draft records may be deleted. Sealed records are designed to preserve an integrity history and cannot be individually altered or deleted inside the application, but the user may archive them, remove a customer’s details subject to an active dispute hold, or delete the entire account.

When a signed-in user deletes their account in the application while connected to the internet, we first delete the user’s subscription record held by RevenueCat, then delete from our database, at once, the account, its trial record, its record of accepted Terms and Privacy Policy versions, and every backed-up record. The application then deletes the user’s profile, agreement records, and signature and logo files from that device. If any server step fails, the application deletes nothing from the device and asks the user to try again.

After deletion, copies remain only as follows:

  • any routine backups of our database kept by our hosting provider, which are deleted as they expire (currently within seven days);
  • security, authentication, and request logs kept by our providers for a limited period, which may include the account’s email address and IP address;
  • purchase and billing records that Apple or Google keep under their own policies; and
  • records on any device where the account was not deleted in the application, until the application is removed from that device.

Documents the user shared with others are outside our control. Account deletion does not automatically cancel a subscription billed by Apple or Google.

Deleting without the application. A user may start an outside-the-application request at https://serviceseal.app/delete-account by emailing support@serviceseal.app from the account’s email address. We confirm the request by reply to that address, then delete as described above, usually within two business days and no later than 30 days, and confirm by email. We do not delete an account on a request we cannot verify. A user who no longer has access to the account’s email address may sign in to the application and delete the account there.

Information submitted separately through our website or support communications may not be linked automatically to the application account. A user may ask us to delete those records as part of an outside-the-application request, subject to verification and lawful retention.

For information in systems we control, we retain personal information only as reasonably necessary for the purposes described in this Policy, including providing an active account, responding to requests, maintaining security, meeting tax or accounting obligations, and establishing, exercising, or defending legal claims. After a verified deletion request is completed, we delete or deidentify covered information unless retention is required or permitted by law. Deleting the application from a device is not the same as deleting the ServiceSeal account. Ending a paid subscription does not itself delete the account or records.

7. Choices and privacy rights

Depending on where a person lives and how applicable law treats the information, they may have rights to request access, correction, deletion, or a portable copy; to opt out of certain sale, targeted advertising, or profiling; to withdraw consent; and to appeal a denied request. ServiceSeal does not sell personal information, use it for targeted advertising, or make decisions producing legal or similarly significant effects through profiling.

Account holders can view and correct much of their information in the application, export their data, remove a customer’s personal details subject to a valid dispute hold, or delete their account. Marketing recipients can unsubscribe using the message instructions or contact us.

To make another request, email support@serviceseal.app with the subject Privacy Request. Describe the request and identify the email address connected to the relevant account or submission. We may verify identity or authority before acting. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct verification. We will not unlawfully discriminate against anyone for exercising a privacy right. To appeal a decision, reply to our response with the word Appeal and explain the concern.

8. Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information and the size of the Service. These include limiting collection; protecting account sessions through the device’s secure credential storage; using encrypted network connections; relying on our hosting provider’s encryption of stored data; permitting each account to read only its own backed-up records; limiting administrative access; and designing sealed records to reveal certain later alterations. We do not access the contents of a user’s backed-up records except where required by law or necessary to protect the security of the Service.

No device, transmission, or storage system is completely secure. Users are responsible for protecting their devices, account credentials, exported files, and the destinations to which they send documents. A ServiceSeal seal is an integrity feature; it is not an encryption guarantee, identity check, independent timestamp, or guarantee that a record is legally enforceable. If we learn of a security incident affecting personal information, we will notify affected users and others as required by law.

9. United States service and children

The Service is operated for users in the United States, and information handled by us or our providers is processed in the United States. The Service is not offered as compliant for business use in other countries unless we expressly say otherwise.

ServiceSeal account holders must be at least 18 years old. The Service is not directed to children, and users should not enter information about minors unless it is lawfully necessary for their business and they have appropriate authority. If you believe a child has provided account or website information to us, contact us so we can investigate and delete it as appropriate.

10. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, or our practices. We will post the revised Policy and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice or request consent when required.

11. Contact us

Bravo Sierra Tech LLC d/b/a ServiceSeal Email: support@serviceseal.app