Privacy Policy

1 Who we are

KloudPoP is operated as a sole proprietorship based in the United States. References to "KloudPoP," "we," "us," or "our" throughout this policy refer to this entity.

2 Information we collect

Information you provide directly:

• Account registration details — name, email address, and password.
• Business profile information — business name, address, and logo if provided.
• Receipt data — payee name, payment amount, payment method, date, and notes you enter.
• Contact information — names, email addresses, and phone numbers of contacts you add.
• Digital signatures — signature images captured when receipts are signed.
• Waitlist signups — email address submitted on our coming soon page.

Information collected automatically:

• Device information — device type, operating system, and app version.
• Usage data — features accessed, screens viewed, and actions taken within the app.
• IP address — collected at account creation and waitlist signup for security purposes.
• Push notification tokens — if you grant notification permissions.

3 How we use your information

• To create and maintain your account.
• To generate, store, and deliver digitally signed receipts.
• To send receipt invitations to your contacts via email or SMS.
• To send transactional emails — account verification, receipt confirmations, and signing notifications.
• To send waitlist and launch communications if you signed up for early access.
• To process subscription billing through our secure payment provider.
• To improve the app through anonymized usage analytics.
• To prevent fraud, abuse, and unauthorized access.

We do not sell your personal information to third parties. We do not use your receipt data for advertising purposes.

4 Data storage and security

Your data is stored in Google Firebase — a cloud infrastructure operated by Google LLC. Firebase services we use include Authentication, Firestore (database), and Cloud Storage. Firebase infrastructure is SOC 2 compliant and encrypts data in transit and at rest.

Signed receipts are stored as immutable records. Once a receipt has been signed by both parties it cannot be altered or deleted by either party — this is a core security and integrity guarantee of the platform.

We take reasonable technical and organizational measures to protect your information. No method of electronic storage is 100% secure and we cannot guarantee absolute security.

5 Third-party services

We work with the following third-party services to operate KloudPoP:

• Google Firebase — authentication, database, and file storage.
• Resend — transactional email delivery.
• Mailchimp — waitlist and marketing email management.
• Stripe — subscription billing and payment processing. We never store your payment card details — they go directly to Stripe.
• Apple / Google — app distribution and push notifications.

Each of these providers has their own privacy policy and data processing agreements with us where required.

6 Recipients of receipts

When you send a receipt invitation to another person, we collect their name and contact information (email or phone) as provided by you, and we send them a signing link. Recipients do not need to create a KloudPoP account. Their signature is stored as part of the immutable receipt record. We do not use recipient contact details for any purpose other than delivering and completing the receipt.

7 Your rights

Depending on your location you may have rights regarding your personal data including the right to access, correct, or delete information we hold about you. To exercise any of these rights, contact us using the information below.

Please note: signed receipts are immutable by design. Deletion of your account will remove your profile and unsent draft receipts, but completed signed receipts are retained as permanent records of payment.

8 Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal profile data within 30 days, subject to the immutability exception for signed receipts noted above. Waitlist email addresses are retained until you unsubscribe.

9 Children's privacy

KloudPoP is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

10 Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of KloudPoP after changes are posted constitutes acceptance of the updated policy.

11 Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: