Draft — pending attorney review

Privacy Policy

What WaiverSaver collects, why, who can see it, and how long we keep it — for school staff, parents, and anyone else who asks.

Who we are

WaiverSaver is operated by Yonah Create, based in Georgia, USA. Contact: team@yonahcreate.com.

What we collect

• From organizations (schools, businesses, nonprofits): the organization's name, the web address it chooses, staff names and email addresses, branding, and the documents it uploads or writes.
• From parents, guardians, and participants: the participant's name; the signer's name, relationship, email, and phone; the signature (drawn or typed); the time of signing; and the network address and browser used, which we record to make the signature attributable.
• From organization staff about participants: class or group lists containing participant names, if the organization chooses to use them.
• Automatically: ordinary server logs needed to run and secure the service. We do not use analytics trackers or advertising cookies. We set one cookie, used only to keep staff signed in.

Children

We collect information about participants, who may be children, from adults: parents, guardians, and organization staff. No part of the service is directed to children, children never have accounts, and we do not knowingly collect information from anyone under 13. If we learn that we have, we delete it.

Why we use it

To operate the service for the organization that collected it: showing the right documents to the right people, recording who signed what and when, producing certificates, showing staff who has and hasn't signed, and sending the emails needed to do those things (sign-in links, receipts, reminders). That is the only purpose. We do not sell personal information, use it for advertising, or build profiles.

Who can see it

• The organization's staff — the people the organization has added to its account.
• The signer, for their own record, through the certificate link they receive.
• Our service providers, only to the extent needed to run the service: Cloudflare (hosting, storage, and delivery) and Resend (email delivery). They are bound by their own commitments not to use the data for anything else.
• Nobody else, unless the law requires it, in which case we notify the organization first where we are allowed to.

How long we keep it

Signed records are kept permanently by default, because a claim involving a minor may be brought years after the event. Organizations can ask us to delete specific records or their whole account. Staff accounts and sign-in links are kept while the account is active; sign-in links expire within hours and are single-use.

Your rights

Organizations can export their data at any time and can ask us to correct or delete it. Parents and participants should contact the organization that collected their information, which controls the record; the organization can act on their behalf, and we support it in doing so. Anyone can write to team@yonahcreate.com with questions.

Security

Data is encrypted in transit (HTTPS) and at rest. Each organization's data is isolated under its own address. Staff sign in with single-use emailed links rather than shared passwords. If we learn of unauthorized access to your data, we will tell the affected organization promptly.

Changes

If we change this policy in a way that matters, staff are asked to review and accept the new version the next time they sign in. The version date is at the bottom of this page.

Version 2026-10-06. Questions: team@yonahcreate.com. See also our plain-language guide to student data, FERPA & COPPA.