Your privacy matters.

1. Overview

Jobslip (“we,” “us,” or “our”) provides tools for business estimates, invoices, and customer document signing. This policy applies to people using the app, recipients opening shared documents, and visitors to our website. For privacy questions or requests, contact support@jobslip.app.

If a business sends you a document through Jobslip, that business chooses the content and recipients. Contact the sending business about its use of your information or the work, charges, or agreement shown on the document.

2. Information we process

Account and workspace information

When you create an account with Apple, Google, or email, we process account identifiers, authentication information, and the name and email made available through your chosen sign-in method. Sign-in providers may also process network information, including IP addresses used to estimate general location for security and fraud prevention. Your workspace may contain your business details, logo, license number, clients and their contact details, estimates, invoices, line items, prices, taxes, discounts, notes, payment instructions, recurring schedules, photos, and uploaded documents.

Customer document and signing information

Shared documents can contain the business and customer details selected by the sender. Review, approval, and signing records can include names, email addresses, signatures, completed document fields, consent text and version, timestamps, time zone, IP address, browser information, and document identifiers and hashes. These records help document what was reviewed and signed and are available to the sending business.

Purchases and subscriptions

Apple processes App Store payments. We use RevenueCat to connect purchase history and subscription status to your Jobslip account. This can include account and transaction identifiers, product, purchase and expiration dates, renewal status, and trial eligibility. Jobslip does not receive your full payment-card number for App Store purchases.

App usage and subscription analytics

Jobslip uses Google Analytics for Firebase to understand setup completion, use of document tools, and app reliability. Optional usage information includes pages and actions, document-creation and sharing outcomes, selected PDF designs, operation duration and success or failure, app sessions, app and operating-system details, device information, an app-installation identifier, and general location provided by the analytics service.

When you are signed in and usage analytics is enabled, Jobslip uses a random analytics identifier to connect this activity with confirmed subscription events from RevenueCat, such as trial starts, paid renewals, cancellation, and expiration. This identifier is separate from your account ID, but the information is account-linked rather than anonymous. A private mapping applies your analytics preference. A separate private deletion index supports account-data removal and is not used for reporting.

If Apple provides campaign attribution and usage analytics is enabled, Jobslip can connect your analytics identifier with Apple Ads campaign, ad-group, and keyword identifiers. Jobslip requests Apple’s attribution token for this purpose and exchanges it with Apple without retaining the raw token. This does not collect Apple’s advertising identifier or enable advertising personalization in Firebase.

Our custom optional analytics events do not include names, email addresses, phone numbers, customer details, invoice line items or amounts, document text, PDF contents, signatures, or attachments. Subscription analytics may include the subscription price and currency supplied by RevenueCat; this is separate from amounts on your invoices. Google Analytics may also measure App Store purchase and subscription events. You can turn optional usage analytics off as described below.

Device, diagnostics, and optional features

Technical information can include app and operating-system versions, device type, error details and stack traces, crash reports, and technical installation or session information used to diagnose reliability problems. Sentry processes crash and error diagnostics; Firebase components also process technical metadata to maintain SDK reliability. We apply filters to reduce sensitive information in error reports. Technical reports may still be associated with an app installation. Optional operation-failure reports use fixed operation labels rather than document contents or the original error message. Basic crash reporting is separate from the optional usage-analytics switch. Notifications use device push tokens, installation identifiers, and notification preferences. If you choose to import a contact, select a photo, or upload a file, the selected information is used for that action. Address autocomplete sends the text you enter to an address-search provider to return suggestions.

Website visits and support

Our hosting providers process network and request information, such as IP address and browser information, to deliver and protect the website and customer portal. These marketing pages do not embed advertising or analytics scripts. If you email support, we receive your email address, message, and any attachments you choose to send.

3. How we use information

• Authenticate your account and save, sync, and display your workspace.
• Create, share, review, approve, sign, and download documents and signed packets.
• Prepare recurring invoice drafts and deliver notifications you enable.
• Verify subscription access, restore purchases, and manage trial eligibility.
• Measure onboarding, document-tool use, repeat usage, subscription outcomes, and available Apple Ads attribution to improve the app and understand acquisition performance.
• Respond to support and privacy requests, diagnose errors, protect the service, and prevent misuse.
• Meet legal obligations and maintain records needed to establish or resolve disputes.

Where applicable privacy law requires a legal basis, we process information to provide the service you request, meet legal obligations, pursue legitimate interests such as service reliability and security, or with your consent where required.

4. Sharing and service providers

Information is shared as needed for the features you use:

• Google Firebase and Google Cloud: account authentication, workspace databases, stored files, server functions, authentication emails, and SDK reliability metadata.
• Google Analytics for Firebase: app usage analytics, installation and random account-linked analytics identifiers, general location, and purchase-event measurement. Learn how Google processes information from apps that use its services.
• Apple and Google: sign-in when you choose their account options. Apple also processes App Store purchases and, when available, Apple Ads campaign attribution.
• RevenueCat: account-linked subscription and purchase verification, and confirmed subscription events used in optional analytics.
• Sentry: crash and error diagnostics. The current app configuration does not enable session replay, screenshots, or document attachments for Sentry reports.
• Expo and Apple push services: notifications and associated delivery identifiers.
• Google Places and Photon/Komoot: address-search suggestions.
• Vercel and Netlify: customer portal and website hosting, respectively.
• Your chosen sharing app: recipients, messages, document links, or files when you send through email, messages, or another share option.

If a business has an available third-party payment integration enabled, the selected payment provider, such as Stripe or Square, processes the payment interaction and provides payment status. Its own privacy terms also apply. Payment instructions printed on a document may direct you to a separate service chosen by the business.

Anyone who has a shared document link may be able to access the document experience available through that link. Recipients may save, download, or forward copies. Share links only with intended recipients.

We may also disclose information when required by law, to protect people or the service, or in connection with a business transfer subject to applicable privacy requirements.

5. Storage, security, and retention

Workspace records and files are stored through Firebase, with copies cached on your device. Service providers may process information in countries other than your own, including the United States, where privacy laws may differ. International processing is subject to applicable data-protection requirements. Contact us with questions about the providers handling your information.

We retain workspace information to provide your account and document history until you delete it or request account deletion. Other information is retained for the purposes described in this policy, taking into account security, support, billing, legal requirements, and dispute resolution. The applicable period depends on the type of information and the service involved; account deletion does not immediately erase every provider’s independently retained transaction, diagnostic, or backup record.

Account deletion removes the owned workspace records, stored files, and associated sharing records covered by the deletion process. For the new optional reporting stores, account deletion also removes indexed private Firebase analytics events, attribution records, associated processing receipts, and the account’s analytics-identity history. A minimal deletion marker is retained to prevent cached credentials from recreating deleted workspace records. Deletion cannot recall copies already saved by recipients.

Optional analytics has retention settings separate from your workspace history. Private Firebase reporting records are assigned an expiration 14 months after collection. Google Analytics and any authorized reporting exports have their own retention settings; deleting account records from Firebase does not automatically erase information already processed in those systems. Turning off collection does not erase previously recorded information. Contact us about access or deletion requests, including analytics data.

We use access controls and other safeguards designed to protect information. No storage system or transmission method can guarantee absolute security. Keep access to your devices, accounts, and shared links secure.

Functional browser storage

The customer portal uses browser storage for features such as display preferences and document state. During a multi-document signing journey, a confirmed signature and name may be retained in session storage with a 15-minute validity window. Placing that signature on a later document and confirming consent remain deliberate actions by the signer.

6. Your choices and account deletion

You can update your workspace information in the app and manage permissions, such as notifications and access to selected device content, in your device settings.

• Export: open More → Data & backups → Export workspace. The JSON export contains records and settings; photos and files are represented by links. Save needed document and file copies separately.
• Delete your account: open More → Data & backups → Workspace management → Delete account. Complete the requested account verification and final confirmation.
• If your subscription has expired: choose Account on the upgrade screen, then Data & account deletion to reach these options.
• App usage analytics: open More → Privacy & your data → Help improve Jobslip. The same Your data screen is available through Privacy & app usage on the welcome screen or Privacy on the upgrade screen. Turning the switch off stops new optional analytics on that device immediately and saves your choice locally. When connected, it also updates the account preference used by server-side analytics. Other signed-in devices apply that preference when they next open or return to Jobslip. If the preference cannot be synchronized, the app pauses optional analytics locally and retries when reopened. Turning analytics back on after opt-out creates a new analytics identifier. Previously recorded information is not automatically erased by the switch. Account, subscription verification, notification, and basic crash-diagnostic services continue to operate.
• Privacy requests: email support@jobslip.app. Depending on your location, rights may include access, correction, deletion, portability, restriction, objection, or withdrawal of consent. We may need to verify your identity before acting.

Uninstalling Jobslip is not account deletion. Deleting your account does not cancel an Apple subscription; manage billing separately in Apple Settings. You may also have the right to complain to your local privacy regulator.

7. Contact and updates

Jobslip is a business productivity service and is not designed for children. If you believe a child has provided personal information, contact us so we can investigate and address the request.

We may update this policy as the service changes. The date above identifies the latest version. Where required, we will provide additional notice of material changes.