Privacy Policy

Overview

This Privacy Policy explains how StubProof ("StubProof," "we," "us," or "our"), an independently operated service based in Australia, handles information when you use our U.S.-focused document tools, create an account, contact us, or purchase a digital document. It also explains the choices available to you.

Information we collect

Document drafts and local browser storage

The document editor processes names, addresses, tax identifiers, payroll figures, and other draft fields in your browser to create the live preview. Drafts are stored in your browser's local storage so you can continue editing on the same device. Fields marked as sensitive, including Social Security and employer identification numbers in supported tax forms, are excluded from saved browser drafts.

The editor does not intentionally upload the raw document fields used to render your draft to StubProof when you type or preview a document. If you use address suggestions, the address text you enter and a temporary session identifier are sent through StubProof to Google Places to return suggestions. You may enter an address manually instead.

For paid documents, your browser creates a salted SHA-256 fingerprint from the document fields. StubProof receives and stores that fingerprint with your account, order, product, and export-entitlement records. The fingerprint is designed to identify whether that exact document has been unlocked without storing the underlying document fields, but it is still treated as account-related data.

Local drafts remain on the device until you clear them, overwrite them, or clear the site's browser storage. Avoid entering sensitive information on a shared or public device.

Account and authentication information

When you create or use an account, we collect information such as your name, email address, authentication method, email-verification status, session information, IP address, browser or device information, and account timestamps. If you use Google or GitHub sign-in, we receive the account information authorized by that provider. Passwords are handled through our authentication system and are not stored in readable form.

Purchase and transaction information

Stripe currently processes checkout and payment-card information. StubProof does not receive or store your full card number. We receive and store transaction information needed to complete and support a purchase, including your account identifier, order number, product, amount, currency, delivery or payment email, Stripe customer and session identifiers, payment status, invoice or refund information, timestamps, and the version of the legal policies accepted at checkout.

Feedback, support, and communications

If you send feedback or request support, we collect the information you submit, which may include your email address, message, category, page URL, attachments, and related correspondence. Please do not include Social Security numbers, complete tax documents, payment-card numbers, or other information that is not necessary for us to respond.

Usage, device, cookies, and analytics

We and our service providers may automatically receive IP address, request timestamps, URLs, browser or device information, referring pages, and security or diagnostic events. We use cookies and similar browser storage for authentication, security, preferences, draft recovery, and feature operation. If enabled, Sentry receives privacy-filtered application errors, stack traces, route pathnames, runtime details, environment, and release information for error diagnosis. StubProof configures Sentry not to send default personal information, request bodies, query strings, cookies, headers, user identity, performance traces, or Session Replay.

If enabled by our administrator, Google Analytics or Plausible may collect information such as page views, approximate location, device and browser information, referring pages, and interactions. Microsoft Clarity may also provide heatmaps and session replays based on page content and interactions such as clicks, scrolling, and navigation. StubProof fully masks the content of document tools, account pages, authentication pages, and administrative pages from Clarity recordings. Clarity also masks input and select values. We configure product analytics so that raw names, street addresses, Social Security numbers, employer identification numbers, and exact wage values are not intentionally submitted as analytics events or replay content.

How we use information

We use information to:

• provide, secure, maintain, and troubleshoot the service;
• create and manage accounts and authentication sessions;
• provide document previews, paid export access, invoices, and purchase support;
• process transactions, refunds, disputes, and fraud-prevention checks;
• answer feedback, privacy requests, and support messages;
• understand product performance and improve our tools;
• enforce our Terms of Service and Acceptable Use Policy; and
• comply with law and protect users, StubProof, and the public.

How we disclose information

We disclose information as needed to vendors that help us operate the service, including hosting and database providers, Stripe for payments, Google Places for optional address suggestions, Google or GitHub for optional sign-in, configured email providers, Sentry for privacy-filtered error monitoring if enabled, Google Analytics or Plausible if enabled, and Microsoft Clarity for privacy-masked usage analytics if enabled. These providers process information under their own terms and privacy practices.

We may also disclose information:

• when required by law, subpoena, court order, or valid government request;
• to investigate fraud, abuse, security incidents, or violations of our policies;
• to protect legal rights, safety, and the integrity of the service;
• as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards; or
• with your direction or consent.

We do not sell personal information for money. We do not currently use personal information for cross-context behavioral advertising.

Retention

We retain each category of information only for as long as reasonably necessary for the purposes described above. The period depends on the type of information, the status of your account, the need to provide purchased export access, security and fraud-prevention needs, dispute and chargeback windows, and tax, accounting, contractual, and other legal obligations.

Account records are generally retained while the account remains active. Order, payment, invoice, refund, legal-acceptance, and related export records may be retained after account closure when reasonably necessary for accounting, fraud prevention, dispute resolution, or legal compliance. Feedback and support records are retained as needed to resolve the request and maintain business records. Server logs and analytics records follow the retention settings of the applicable service and our operational needs.

Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. No method of transmission, browser storage, or electronic storage is completely secure, and we cannot guarantee absolute security.

Your privacy choices and U.S. state rights

You may:

• use supported free drafting tools without creating an account;
• enter addresses manually instead of using Google Places;
• clear locally saved drafts through your browser settings;
• manage cookies and similar storage through browser controls; and
• ask us to access, correct, or delete personal information associated with you.

Depending on where you live and subject to applicable law, you may also have rights to receive a copy of personal information, obtain information about collection and disclosure, correct inaccurate information, request deletion, opt out of certain sales, sharing, or targeted advertising, and appeal a denied request. We will not discriminate against you for exercising an applicable privacy right.

Submit a privacy request through the Feedback link in the site footer and provide the email address associated with your account. We may need to verify your identity and authority before completing a request. We may retain information where permitted or required by law, including transaction, security, fraud-prevention, and legal records. Authorized agents may submit requests where applicable, subject to verification.

Children

StubProof is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Paid tools and account creation are intended for users who can legally enter into a binding agreement.

U.S. service and international users

StubProof is directed primarily to users in the United States. Information may be processed in the United States and other locations where our service providers operate. If you use the service from another country, your information may be transferred to jurisdictions with different data-protection laws.

Changes to this policy

We may update this Privacy Policy as the service or law changes. We will post the updated version and change the date above. If a change materially affects how we handle information already collected, we will provide additional notice when required.

Contact

For privacy questions or requests, use the Feedback link in the site footer and select the question or other category. Do not include sensitive document fields in the message.