Privacy Policy

Plain-language summary: SignPayGo collects information only to run the service. We do not sell data. Student data collected through schools is governed by FERPA and is never used for advertising. If you have questions, email us at privacy@signpaygo.com.

01 Who We Are

SignPayGo (“SignPayGo,” “we,” “us,” or “our”) is a software platform operated by SignPayGo, Inc. We provide schools, summer camps, youth sports programs, and similar organizations with digital tools for collecting permission slip signatures, liability waiver signatures, emergency contact information, and payments through a single mobile-friendly link.

This Privacy Policy describes how we collect, use, store, and share personal information when you use our website at signpaygo.com and our platform at secure.signpaygo.com (together, the “Service”).

By using the Service, you agree to the practices described in this policy. If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to this policy.

02 Information We Collect

Information organizers provide

When a school administrator, camp director, activity coordinator, or other organizer (“Organizer”) creates an account or sets up an event, we collect:

  • Name, email address, and password
  • Organization name, type, and address
  • Payment account information for receiving collected payments (processed through Stripe; we do not store full card numbers)
  • Event details, waiver language, custom form fields, and any other content you add to your forms
  • Student or participant lists uploaded by the Organizer (name, email address, and related identifying information)

Information parents and participants provide

When a parent, guardian, or participant (“Respondent”) completes a form sent by an Organizer, we collect:

  • Name and email address of the parent or guardian
  • Student or participant name and any other information requested in the form
  • Electronic signature and the timestamp, IP address, and device information associated with that signature
  • Emergency contact information (name, relationship, phone number) if the form requests it
  • Medical or allergy information if the Organizer has included such fields
  • Payment information (processed by Stripe; we transmit payment data directly to Stripe and do not store card numbers)

Information we collect automatically

When you visit our website or platform, we automatically collect:

  • IP address, browser type, and operating system
  • Pages viewed, time on page, and referring URL
  • Device type and screen resolution
  • Cookies and similar tracking technologies (see Section 8)

Information from third-party integrations

If an Organizer connects SignPayGo to a third-party student information system such as Veracross, we may receive student and parent contact data (such as student name, parent name, and email address) from that system on behalf of the Organizer, solely to pre-populate forms and reduce manual data entry. This data is used only as directed by the Organizer and is governed by the Organizer’s agreement with the third-party system.

03 How We Use Your Information

We use the information we collect to:

  • Create and maintain your account and provide the Service
  • Send permission slip links, reminders, and confirmation emails to Respondents on behalf of Organizers
  • Process and record e-signatures and maintain legally compliant audit trails
  • Facilitate payment collection and disbursement through Stripe
  • Generate real-time dashboards and roster exports for Organizers
  • Send transactional emails such as account confirmations, event notifications, and payment receipts
  • Send product updates or marketing communications to Organizers who have opted in (Organizers may opt out at any time)
  • Verify email addresses and prevent spam or abuse
  • Improve and develop the Service through aggregated, de-identified analytics
  • Comply with applicable law and respond to legal requests

We do not use Respondent data, including student information, for advertising, marketing profiling, or any purpose unrelated to the specific event the Respondent signed up for.

04 How We Share Your Information

We do not sell your personal information to anyone, ever. We share information only in the following circumstances:

With the Organizer

All information submitted by a Respondent — signatures, emergency contacts, payment status, and custom field responses — is visible to the Organizer who created the event. Organizers are responsible for handling this data in accordance with applicable law and their own privacy commitments to parents and participants.

With service providers

We share data with third-party vendors who help us operate the Service, under written agreements that restrict their use of data to the services they provide to us:

  • Stripe — payment processing and merchant onboarding
  • Amazon Web Services (AWS) — cloud hosting and infrastructure
  • SendGrid (Twilio) — transactional and event email delivery
  • Kickbox — email address verification
  • Google Analytics / Google Tag Manager — website analytics

For legal compliance

We may disclose information if required to do so by law, court order, or government request, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of SignPayGo, our users, or the public.

In a business transfer

If SignPayGo is involved in a merger, acquisition, or sale of all or substantially all of its assets, personal information may be transferred as part of that transaction. We will notify affected users before any such transfer and provide the opportunity to close accounts.

05 Student and Minor Data (FERPA & COPPA)

SignPayGo serves schools and organizations that work with children. We take our obligations with respect to student and minor data seriously.

FERPA

When SignPayGo collects or receives student education records on behalf of a school or school district, we act as a “school official” under the Family Educational Rights and Privacy Act (FERPA) with a legitimate educational interest. We use student data solely to provide the Service to the school and never for advertising, building behavioral profiles, or any secondary commercial purpose. Schools retain control over their student data and may request export or deletion at any time.

COPPA

The Service is not directed at children under 13. SignPayGo does not knowingly collect personal information directly from children under 13. Form submissions from students are collected through a link sent to and completed by a parent or guardian, not by the student themselves. If we become aware that we have inadvertently collected personal information directly from a child under 13 without verifiable parental consent, we will delete it promptly.

Minor data use restrictions

Student and minor participant data collected through SchoolAdministrations is:

  • Used only to provide the specific service the school or camp has engaged us for
  • Never sold or disclosed to third parties for commercial purposes
  • Never used to build advertising profiles
  • Retained only as long as necessary to fulfill the purpose for which it was collected, or as required by law

06 Data Retention

We retain account information for as long as your account is active. Organizers may close their account at any time by contacting support@signpaygo.com, and we will delete or de-identify personal data within 30 days of that request, except where we are required to retain it by law (for example, payment records for tax purposes).

Signed forms and their associated audit trails are retained for as long as the Organizer’s account is active and for up to 3 years afterward, to support any legal or compliance needs related to the signed documents. Organizers may request earlier deletion of specific records in writing.

Automatically collected analytics data is retained in aggregated, de-identified form indefinitely.

07 Security

We use industry-standard technical and organizational measures to protect your data:

  • All data is encrypted in transit using TLS 1.2 or higher
  • Data at rest is encrypted on SOC 2 Type II compliant infrastructure (Amazon Web Services)
  • Passwords are hashed and never stored in plain text
  • Payment data is transmitted directly to Stripe and never stored on SignPayGo servers
  • Access to production systems is restricted to authorized personnel

No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at security@signpaygo.com.

08 Cookies and Tracking

We use cookies and similar technologies on our website and platform for the following purposes:

  • Essential cookies — required for the platform to function (session management, authentication)
  • Analytics cookies — Google Analytics, used to understand aggregate usage patterns; data is anonymized where possible
  • A/B testing — we use Statsig to test variations of our website to improve the user experience; no personal data is used to target these tests

You can disable non-essential cookies in your browser settings. Disabling cookies may affect some functionality of the website but will not prevent you from completing a form as a Respondent.

We do not use cookies or tracking pixels on the form completion pages used by parents and Respondents, except the session cookie necessary to maintain your place in the form.

09 Your Rights and Choices

Organizers

You may access, update, or delete your account information by logging into your dashboard or contacting privacy@signpaygo.com. You may also request a copy of all data we hold associated with your account.

Parents and Respondents

If you submitted a form as a parent or participant and would like to request access to, correction of, or deletion of the information you provided, please contact the Organizer directly. The Organizer controls the event data and can fulfill such requests. If you are unable to reach the Organizer, contact us at privacy@signpaygo.com and we will assist.

Marketing emails

Organizers who receive marketing or product update emails from SignPayGo may unsubscribe at any time using the unsubscribe link in those emails or by contacting privacy@signpaygo.com. Transactional emails (receipts, form confirmations, reminders for events you’ve signed up for) cannot be opted out of while you have an active account or pending form submission.

California residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. SignPayGo does not sell personal information. To exercise your CCPA rights, contact privacy@signpaygo.com.

10 Third-Party Services

The Service integrates with third-party platforms to enable its features. Each third party has its own privacy policy and data practices:

  • Stripe — stripe.com/privacy — payment processing
  • Veracross — veracross.com/privacy — student information system integration (only for schools that have connected their Veracross account)
  • Google Analytics — policies.google.com/privacy — website analytics
  • SendGrid — sendgrid.com/policies/privacy — email delivery

SignPayGo is not responsible for the privacy practices of third-party services. We encourage you to review their policies.

Our website may contain links to third-party websites. This policy does not apply to those websites. We are not responsible for the content or privacy practices of any linked site.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify Organizers by email and update the “Last updated” date at the top of this page. Your continued use of the Service after any change constitutes your acceptance of the updated policy.

We will not make changes that materially reduce your rights or the protections afforded to student data without providing at least 30 days’ advance notice.

12 Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact us:

  • Email: privacy@signpaygo.com
  • Mail: SignPayGo, Inc., Privacy Team, [Your Address]

We will respond to all privacy inquiries within 30 days.

Questions about your data?

We’re a small team that takes privacy seriously. Reach out and a real person will respond.

Email privacy@signpaygo.com