Privacy Policy

Who operates JobSigner

JobSigner is a product of ZOAK Consolidated LLC. ZOAK Consolidated LLC operates the JobSigner website, web application, and mobile applications. You can contact us about privacy or support at team@jobsigner.com.

This notice covers information we handle to provide these services. A business using JobSigner controls the customer and work information it adds to its workspace. Contact that business about its services or records; contact us when you need help with information held by JobSigner.

Information used to provide the service

• Account and workspace information: your account identifier, name, email address, sign-in information, linked sign-in identities, workspace membership, role, and business profile. If you choose Google or Apple sign-in, we receive the identity information that provider shares for authentication. Apple may provide a private relay email address when you choose Hide My Email.
• Business records you provide: customer contact details, work locations, jobs, schedules, notes, photos and files, quotes, approvals, invoices, and recorded payment information.
• Billing and online payment records: subscription plans, billing periods, payment and connected-account identifiers, amounts, fees, payment status, refunds, disputes, and payout status. We use these records to provide paid access, reconcile payments, and support businesses and their customers.
• Communications: messages you send through JobSigner, their recipients and delivery results, customer responses through shared document links, and messages you send to our support team.
• Text messages from our team: your mobile phone number, your consent to receive texts and any opt-out, and the messages we exchange, as described in Text messages (SMS).
• Website-service inquiries: the name, email, business name, optional website address, and project details you submit through our website quote form. We use these details to respond to your inquiry and discuss the requested service.
• Assistant information: your requests, relevant conversation, and permitted workspace context needed to answer questions or prepare actions.
• Service and security information: request and account identifiers, timestamps, outcomes, failure codes, durations, connection information, and staff access records needed to operate, secure, and troubleshoot the service.

We use this information to authenticate users, apply workspace permissions, provide the features you request, deliver messages, support customers, prevent misuse, and maintain service reliability. Your business records are shared with authorized workspace members according to their roles and with recipients you choose when sharing documents or sending messages.

Setup reminders and welcome email

If you confirm your JobSigner account but haven’t created your business yet, we may email you reminders to finish setting up: after about 1, 3, 7, 14, and 30 days without using the app, then about every 30 days until about day 120. When your trial starts, we send you one welcome email. These emails come from a named member of the JobSigner team.

To time them, we record when you last opened the app while signed in and your browser’s time zone. We also record which reminders we sent you and whether you clicked a link in one.

Every reminder has an unsubscribe link. Unsubscribing takes effect immediately. So the reminders don’t start again, even after you delete your account, we keep a one-way hashed record of the address; it can’t be turned back into a readable email address. We don’t send these reminders if your browser is set to a European time zone.

Optional usage information

Optional usage collection is off unless you turn it on. When available and enabled, it records selected screen names and successful actions, linked to your account and workspace, along with the web or mobile platform, time, outcome, and duration. We use it to understand feature usage and the number of active accounts across web and mobile. These records are linked to you; they are not anonymous.

You can change your choice in the web app’s Privacy settings or the mobile app’s Account screen. Your choice applies to your account on these platforms. Turning it off stops new optional usage collection when the server confirms the change. Previously collected records remain subject to the retention periods below. Declining does not remove application features or affect your subscription.

The optional usage setting does not disable records needed to provide email delivery, Assistant usage accounting, security, support, or service-error monitoring. Those records are used for operating the service. Configured staff and test accounts are excluded from active-user statistics.

Our operational analytics do not contain customer notes, photos, email bodies, Assistant prompts or responses, passwords, authentication tokens, private document links, or session recordings. We do not record keystrokes or session replay for these analytics. JobSigner separately handles the business content needed to provide the features you use.

You can manage your privacy choice in Account in the app.

Error and crash diagnostics

When enabled for an application release, Sentry processes limited web errors and iPhone crash reports in the United States to help us find and fix failures. These service diagnostics are separate from optional usage information. Reports include the app version, time, a generic error category, and code positions or native addresses and debug identifiers needed to locate the fault.

We filter these reports before sending them. They do not include customer notes, photos, email contents, Assistant conversations, passwords, tokens, account names, email addresses, or request URLs. We do not enable session replay, screenshots, tracing, profiling, log streaming, or AI features in Sentry. Stored event IP addresses are removed; the service still receives the network connection needed to deliver a report.

Individual diagnostic events remain in Sentry’s ordinary event storage for up to 30 days. Sentry’s separate recovery backups may remain for up to 90 days after backup creation. The iPhone SDK may temporarily store reports locally while offline, with a bounded queue. Reports older than 30 days are rejected before upload; this does not promise that every local SDK cache file is deleted on that exact day.

Website analytics and advertising

On our public website, jobsigner.com, we use Google Analytics, the Meta Pixel, and Microsoft Clarity to understand how visitors find and use the site and to measure and improve our advertising. These tools do not run in the JobSigner web or mobile applications or on the help pages the apps link to, and they are separate from the optional usage setting described above. They connect only through the trial messages to Meta described below.

These providers can set cookies or similar identifiers in your browser and receive the pages you view, how you arrived (for example, the referring site or ad campaign), your clicks on sign-up, sign-in, phone, and email links, the fact that a service inquiry was submitted, and device, browser, and approximate location information derived from your connection.

• Google Analytics measures website traffic and inquiries. We keep its event-level data for 14 months.
• Meta Pixel tells Meta about your visits and the actions above so we can measure our ads on Facebook and Instagram and show JobSigner ads to people who have visited our website. Meta may connect this information to your Facebook or Instagram account and processes it under its own privacy policy.
• Microsoft Clarity records how pages are used, including clicks, scrolling, and mouse movement, so we can find and fix confusing pages. Clarity masks the text you type into our forms. Recordings are kept for up to 30 days, or up to 13 months when we save one to investigate a problem.

We do not send what you type into our inquiry forms (your name, email address, business name, website, or message) to these providers.

Trials from Facebook and Instagram ads. If the Meta Pixel was active for you on our website and you later start a JobSigner trial in the same browser, our servers tell Meta that a trial started. This lets us measure which ads lead to trials and show our ads to people more likely to try JobSigner. The message includes the identifiers the Meta Pixel stored in your browser on jobsigner.com (including the ad-click identifier, if you arrived from an ad), your browser type and IP address when you started the trial, when the trial started, and the price of the plan. If you then add a card during your trial, our servers may also tell Meta, once, that payment information was added (Meta’s “AddPaymentInfo” event), under the same conditions and with the same limits. These messages never include your name, email address, business information, customer records, or payment details. We don’t send them if your browser sends a Global Privacy Control signal or if the Meta Pixel didn’t run for you. We delete the stored identifiers within 7 days, whether or not a trial starts.

Where new accounts come from. When you arrive on jobsigner.com, we remember in your browser, for up to 90 days, how you got there: the campaign tags in the link (such as the ad campaign’s name), whether you came from a Facebook, Instagram, or Google ad click (yes or no, not the click identifier), the name of the website that referred you, the first page you opened, and when. If you click a trial button, we pass this to the app, which keeps it in your browser and saves it with your new JobSigner account if you first sign in within 7 days, so we can count sign-ups by where they came from. With it, the app saves whether you signed up inside another app’s built-in browser (for example, Facebook’s or Instagram’s), yes or no. The app deletes its browser copy when you sign in, or the next time you open the app after those 7 days. It stays with us and is never sent to Meta, Google, or anyone else, so we keep it even when your browser sends a Global Privacy Control signal. We don’t keep it, and the app deletes its copy, if your browser is set to a European time zone or you turn off analytics with ?analytics=off, and we delete it with your account. Separately, the app counts how many visits reach each sign-up step (the sign-up screen, choosing a sign-in method, and returning from the sign-in page), without identifying anyone.

Some U.S. state privacy laws treat letting an advertising platform use website activity this way as “sharing” personal information or “targeted advertising.” If your browser sends a Global Privacy Control signal, we do not load the Meta Pixel or Microsoft Clarity, and Google Analytics runs without its advertising features. You can also block or delete cookies in your browser, use Google’s Analytics opt-out browser add-on, and manage how Meta uses your activity in your Meta ad preferences.

Using the Assistant

The Assistant is optional. Before your first request, we ask you to review and accept a separate data-sharing notice. With your permission, JobSigner sends your request, relevant conversation, and workspace information your role permits through OpenRouter to an eligible model provider. The current provider pool includes Together, Parasail, Modal, and Wafer. The model helps plan and answer; JobSigner’s server applies permissions and performs supported actions.

Your Assistant choice applies to your account on web and mobile. You can withdraw it in Account settings. Once the server confirms the change, it blocks new Assistant requests and further processing of existing requests when permission is next checked. Withdrawal cannot recall information already sent to a provider or undo an action already performed. Declining the Assistant leaves the other application features available and does not change your separate optional usage choice.

Our routing requires providers that support our data-collection restrictions and zero-data-retention setting. This is not a promise that no information is stored: JobSigner keeps the conversation and action records needed for the feature, and the provider’s permitted in-memory processing can include temporary caching. Operational Assistant monitoring records model/provider identifiers, token counts, cost, and timing separately from conversation content. JobSigner’s Assistant run and conversation records expire after seven days; physical cleanup is asynchronous. This does not delete the business records you asked the Assistant to work with.

When you choose to report an Assistant response, we ask for separate permission to send that response, the message you sent with it, and your selected reason to JobSigner staff for safety review. Reports include account and workspace references so we can investigate them. They do not include other conversation messages, attachments, or device data, and we do not send reports to an AI provider. Reports expire after 30 days; physical cleanup is asynchronous.

In the web app, you can also dictate a message. When you press the microphone, JobSigner records your voice until you press stop, then sends the recording through OpenRouter to a transcription provider to turn it into text. The text appears in the message box for you to review; nothing goes to the Assistant until you send it. JobSigner does not store the recording. Dictation uses the same Assistant permission and the same data-collection and zero-data-retention routing as typed requests.

Text messages (SMS)

JobSigner, a product of ZOAK Consolidated LLC, sends text messages only to people who agree to receive them. Our team asks for your permission during a phone call before we text you, and we keep a record of your mobile number, when you agreed, and who asked. We use your number to send the follow-up messages you agreed to, answer your replies, and honor opt-out and help requests. Our text messaging provider, Twilio, delivers these messages for us.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except the providers that deliver our messages, and only so they can deliver them.

Reply STOP to any message to stop receiving texts, or HELP for help. We keep records of your consent and any opt-out so we can honor your choice. Our SMS Terms describe the program, message frequency, and costs.

Reporting content or users

When you report workspace content or a user’s behavior, we ask for permission to send your subject, description, any selected app record reference, and account and workspace references to authorized JobSigner staff for private safety review. We do not automatically attach the underlying content, files, or other messages, and we do not send the report to an AI provider or the person being reported. Reports are scheduled for deletion after 30 days; physical cleanup is asynchronous.

AI receptionist and demo line

JobSigner’s AI receptionist answers phone calls for service businesses. A business can turn it on for its own phone line, and our demo line lets businesses hear how it would answer for them. It answers incoming calls only and never starts calls or sends texts. When it can’t take a call, or a caller asks by pressing 0, it can forward that caller’s call to a phone number the business has chosen.

When a business uses the receptionist on its own line, that business is the controller of its callers’ information and decides how it is used. JobSigner processes that information only on the business’s behalf and on its instructions, as its service provider and processor, to provide, secure, and support the receptionist. Contact the business about how it uses your information. JobSigner is responsible for information from demo-line calls.

Every call the receptionist answers begins with a notice that the caller is speaking with an AI assistant and that the call is recorded and transcribed. On a business’s line, the receptionist says: “Thanks for calling [business name]! I’m an AI assistant, and this call is recorded and transcribed by [business name] and its service providers. If that’s okay with you, just stay on the line. If not, you can hang up, or press 0 anytime for [business name]’s phone.” If the business hasn’t set a fallback phone, the notice ends instead: “If that’s okay with you, just stay on the line. If not, you can hang up.” On the demo line, the notice says that the call is recorded and transcribed by JobSigner and our service providers. The notice plays before the receptionist starts listening: until it has finished, none of the caller’s audio is sent to JobSigner’s servers or to our transcription or AI providers, and nothing the caller says is transcribed. During the notice, Twilio, which carries the call, only detects whether the caller presses a key. The notice can’t be interrupted, skipped, shortened, reworded, or turned off. Some states, including California, require the consent of everyone on a call before it is recorded; playing this notice first lets every caller decide whether to continue, hang up, or, where offered, press 0 to be transferred to the business’s phone. If a caller switches to another language, the receptionist repeats in that language that it is an AI assistant and that the call is recorded and transcribed, before continuing. The receptionist never claims to be a person.

When you call, we collect:

• Call information: the number you call from, or that your caller ID was withheld or unavailable; the number you called; the time and length of the call; how long you waited on hold; whether you pressed 0; whether the call was forwarded to the business’s fallback phone; and the call’s outcome.
• Your speech: after the opening notice, what you say is transcribed as you speak so the receptionist can answer. JobSigner does not store audio recordings of calls, and businesses don’t receive any; the audio is processed in transit.
• Transcript and summary: the text of the conversation, an English translation of anything said in another language, and a short summary of the call.
• Details you give: for example your name, callback number, service address, what you need, how urgent it is, when you’d like a call back, and whether you asked not to be contacted.
• Service and security information: call identifiers, timing, response times, provider costs, hold and forwarding outcomes, and failure codes needed to operate and secure the line. Our operational logs and metrics do not contain phone numbers, transcripts, or what callers say.

When all the receptionist’s lines are busy, a caller hears a short message and waits up to 60 seconds for a line; nothing is transcribed while they wait. When the receptionist can’t take a call on a business’s line (for example, when its lines stay busy, the business’s minutes or budget are used up, or it is paused, suspended, or turned off), or when a caller presses 0 to reach the business, Twilio may forward the call to a fallback phone number the business has chosen. JobSigner does not listen to, record, transcribe, or summarize a forwarded call; we keep the call information above, including that it was forwarded. Once forwarded, the conversation is between the caller and the business, under the business’s own phone service and practices. The business’s fallback number is stored with its receptionist settings and shared with Twilio to forward calls.

On a business’s line, the receptionist also answers calls whose caller ID is withheld or unavailable, under an hourly limit for such calls that protects the line from abuse. For those calls we record that the caller ID was withheld, and the receptionist uses only a callback number the caller chooses to give; it never reads a number back from caller ID. The demo line answers only callers with US or Canadian caller ID.

We use this information to answer the call, take a message, and pass the caller’s request to the business. On a business’s line, the call information, transcript, summary, and details the caller gives are shown to that business’s team in JobSigner, according to each team member’s role. The summary and the caller’s name, number, what they need, and how urgent it is are also emailed to the recipients the business chooses. For demo-line calls, authorized JobSigner staff review calls to follow up with the business that tried the demo and to check the receptionist’s quality and safety. The receptionist can translate between the caller’s language and English: it replies in the language the caller speaks, and after the call, anything said in another language is translated into English for the team that reviews it. A business can link a call to a customer already in its JobSigner records. To suggest the match, JobSigner compares the caller’s number and any callback number given with the phone numbers in that business’s own customer records; the comparison stays within that business’s workspace.

The receptionist never asks for payment card numbers, bank account numbers, or Social Security numbers. If a caller says one, it is replaced with “[number removed]” before the text reaches the AI model or is stored in the transcript or summary. The spoken audio still passes through the transcription provider before the number is removed. We do not create voiceprints or identify callers by their voice. We do not sell call information, use it for targeted advertising, or use call content to train AI models. We do not use the content of calls to a business’s line for our own purposes, except for de-identified, aggregated statistics and for security.

These service providers process call information for JobSigner, including on behalf of the businesses that use the receptionist:

• Twilio: connects the phone call, plays the opening notice and the hold message, detects key presses, forwards calls to a business’s fallback phone, and, after the notice, streams the call’s audio to our servers. Twilio keeps call records, such as the numbers involved (including a fallback number a call was forwarded to), times, and durations, under its own policies.
• Microsoft Azure Speech: transcribes the caller’s speech as the call happens, with content logging turned off. If it is unavailable, short audio clips are sent through OpenRouter to Microsoft’s transcription model instead.
• OpenRouter: routes requests to the model and voice providers below. Our requests exclude providers that use prompts for training.
• OpenAI, through OpenRouter: writes the receptionist’s replies, the call summary, and translations, using the conversation, the business information set up for the line, and the caller’s number when caller ID is available (only its last four digits during the call; the full number for the summary, to record the callback number).
• ElevenLabs, through OpenRouter: turns the receptionist’s replies into speech. It receives the reply text, not the caller’s voice.
• Amazon Web Services: hosts the receptionist, stores call records, transcripts, operational logs, and metrics in the United States, and delivers new-call emails to businesses.

We ask providers not to retain call content wherever they offer that option, but not every provider used for the receptionist offers zero data retention. Those providers may keep call content for a limited time under their own policies, for example to monitor for abuse. The zero-data-retention routing described for the Assistant does not apply to the receptionist.

Demo-line call records, transcripts, summaries, and captured details are deleted automatically 7 days after the call. On a business’s line, call records, transcripts, summaries, and captured details are kept for 180 days after the call and then deleted automatically, or sooner if the business asks us to delete them. If the business saves a caller to its JobSigner records, for example as a new customer, that record is kept with the business’s other records. Emails already sent to the business’s recipients stay in their mailboxes. Physical cleanup is asynchronous.

Your choices on a call:

• Leave before the receptionist listens: hang up during the opening notice. Nothing you say is transcribed, and we keep only the call information described above.
• Reach the business instead: where the business has set a fallback phone, press 0 at any time to be transferred to it.
• Decline recording or the AI: say so at any time, and the receptionist ends the call or, on a business’s line with a fallback phone, transfers you to that phone. We keep only the call information described above, not a transcript, summary, or details, and no new-call email is sent. You can also hang up at any time.
• Ask not to be contacted: tell the receptionist, and the request is recorded with the call. On a business’s line, the business can see it in the call’s transcript. JobSigner will not make further sales contact after a demo-line call where you asked not to be contacted.
• Access or deletion: for a call to a business’s line, ask that business. It controls your information and can ask us to delete it; we will help it respond. If you contact us about a call to a business’s line, we will pass your request to that business. For a demo-line call, email team@jobsigner.com with the number you called from and the approximate time of the call. We may need to verify that the number is yours.

Service providers

We use service providers to run JobSigner:

• Amazon Web Services: application hosting, authentication, databases, file storage, email delivery, and operational monitoring.
• Cloudflare: website/application hosting, network protection, and staff access controls. Cloudflare web traffic and performance measurement is separate from the account-level optional usage setting and can collect page and browser-performance information.
• Google: Google sign-in when you choose it, our support email service, and Google Analytics on our public website.
• Meta: the Meta Pixel on our public website and the trial messages, both described above.
• Microsoft: Microsoft Clarity on our public website, and Azure Speech transcription for the AI receptionist, both described above.
• Twilio: connecting and forwarding AI receptionist phone calls, and sending and receiving the text messages from our team, as described above.
• Formspree: receiving and routing the website-service quote form submissions described above.
• Stripe: processing JobSigner subscriptions and, when a business connects its Stripe account, that business’s customer invoice payments. We share workspace and transaction references, invoice numbers, amounts, and selected subscription details with Stripe. You enter payment details and merchant identity and bank information on Stripe’s hosted pages, rather than in JobSigner’s forms. Stripe returns identifiers, amounts, status, and related payment, subscription, and account records needed for reconciliation and support. Stripe also processes information under its privacy policy.
• OpenRouter and eligible model providers: processing Assistant requests and AI receptionist calls as described above.
• Sentry: the limited error and crash diagnostics described above, hosted in the United States.
• Apple: Apple sign-in when you choose it, including its private email relay when used, and iPhone application distribution and TestFlight testing under Apple’s applicable services and privacy terms.

Providers process information for their service roles. We may also disclose information when required by applicable law or when necessary to investigate abuse and protect users or the service. We do not use the optional account activity described here for targeted advertising.

Retention and deletion

Different records serve different purposes:

Expired operational records are excluded from ordinary dashboard access. Automatic physical removal can take additional time, and restricted database recovery copies can remain for up to 35 days. These periods do not describe every hosting provider’s own service records.

Account and current workspace directory information is retained while needed to provide the account or workspace. Removed business and inactive or removed membership directory entries expire after 90 days. Your privacy preference is kept with your account so we can honor it. Business records and attachments have separate operational and recordkeeping needs; the telemetry periods above do not determine their retention.

Starting a trial doesn’t need payment details. When you create a business, JobSigner creates a trial customer and subscription for it with Stripe, sharing identifiers only. You enter payment details with Stripe only if you add a card, and Stripe processes them. JobSigner stores the related customer and subscription identifiers, trial dates, whether a card is on file, payment confirmation, and subscription status to verify workspace access and provide billing support. We do not store full payment-card details. To limit repeat trials and abuse, we also retain a hashed verified-email identifier and a trial reservation for up to 365 days, including after account deletion. These records are used for eligibility and security, not advertising, and expire independently of your business records. The hashed unsubscribe records for setup reminders, described above, are also kept after account deletion so the reminders don’t resume.

You can initiate account deletion from Account in the web or mobile app. After you confirm the request, we block account access and process deletion within 30 days through a reviewed fulfillment process. We send a completion notice once processing is complete. Shared workspace ownership and records must be handled according to the relevant rights and obligations; deleting your account does not automatically delete coworkers’ accounts. Any retained business records require a documented purpose and retention period. Your completion notice identifies retained categories, reasons, and dates.

For 365 days after completion, we keep minimal security receipts and identity denial records to document deletion and prevent old credentials from restoring access. These contain pseudonymous account identifiers, request and audit references, timestamps, and retention information, rather than your account name or email address. Physical removal is asynchronous. Restricted backups follow their recovery retention periods; a restoration must honor recorded deletions before application access resumes.

To request access, correction, or help with deletion, email team@jobsigner.com. We may need to verify your identity and your authority over a workspace. We will explain any records that need to remain. Signing out or leaving a workspace is not account deletion.

Device storage and security

JobSigner uses browser or device storage for sign-in, session state, and work in progress. The mobile apps store sign-in credentials in the device’s secure storage. Necessary session cookies and storage are distinct from optional usage collection. Our public website also uses the analytics and advertising cookies described in Website analytics and advertising, and the web application reads the Meta cookies only when you start a trial and keeps where you came from in your browser until you first sign in, using it only within 7 days, as described there. You can clear local browser or app data, but that does not delete records held in your workspace.

We use access controls, protected connections, and restricted staff access to help safeguard information. Authorized staff can inspect limited operational information to resolve service issues. To help new owners get set up and to follow up with them, authorized JobSigner staff can also see a new account’s sign-up email address, setup progress, sign-up source, reminder history, and last app use in our operations console. That access and other privileged staff actions are audited. No system can promise absolute security.

Questions and changes

This service is intended for business use. Privacy rights depend on where you live and the applicable law. Contact team@jobsigner.com about your information or this notice. We will update this page when our practices change, show the effective date, and obtain a new Assistant or optional usage choice when a material change requires it. Our Terms of Service describe using JobSigner.