86 PaperSign

Privacy

Effective 2026-08-26 · 86PaperSign privacy notice

This notice covers everything the preview site does today. The controller is The ShadyBot Empire LLC, a Virginia limited liability company, PENDING-OWNER-INPUT. Reach us at [email protected].

What we collect

The personal information this site collects is what you type into the self-serve setup form:

  • Business name and business type
  • Your name, email, and (optionally) phone number
  • City & state
  • The number of locations you want to connect

Alongside your entry we record the submission time, your country, and a one-way hash (SHA-256) of your IP address for abuse prevention. We never store your raw IP address.

We ask for a phone number so we can reach you about your setup record. We do not send marketing text messages. Text messaging with 86PaperSign is a separate, opt-in program described under Text messages below.

What we use it for

We use it to operate and resume your preview setup record, contact you about activation stages, answer questions, and prevent abuse. We send marketing only when you separately check the optional marketing box. Nothing is billed by this preview.

What we never do

  • We never sell your information. Not to anyone, not ever.
  • We never share it with advertisers or data brokers.
  • We run no third-party analytics, trackers, ad pixels, or external scripts on this site.

Where it lives, and who processes it

These are the service providers that handle your information today:

  • Cloudflare — hosts this site and stores setup records in Workers KV. The production control plane is designed to move structured onboarding records to Cloudflare D1 once that database is provisioned.
  • Resend — sends the email containing your resume link. It receives your name and email address.
  • Google Workspace — hosts our [email protected] mailbox, so anything you email us lives there.
  • Google — when you connect a Business Profile, Google's sign-in and API services process that authorization under Google's own terms.
  • Twilio — carries the text messages of the founding pilot and receives your mobile number and message text for that purpose.

A random resume token is stored only in your browser's session storage; the server stores its one-way hash.

How long we keep it

Setup records and preview signups expire automatically 180 days after they are written. Email you send us stays in our inbox until we delete it. You can ask us to delete anything sooner.

Google account data

When you choose Connect Google Business Profile on your setup record, Google asks you to sign in and to grant 86PaperSign the Manage your Business Profile permission together with your basic profile email. We receive and keep:

  • The email address of the Google account you connected, so we can show you which account is linked.
  • An authorization (a refresh token) that lets 86PaperSign act on that permission later. It is encrypted before it is stored, using a key kept separately from the database, and it is never shown to anyone.
  • The result of one read-only check of which Business Profile accounts that grant can see. Until Google approves our API access this check reports "pending" and no location data is retrieved.

We use this access solely to read the locations you choose and, after you have approved a specific change by text, to apply that change and read it back — never to build advertising profiles, never to sell or transfer it, and never for any purpose you did not approve. Live listing changes are not enabled today; connecting stores the authorization and nothing else happens to your listing. You can revoke our access at any time from your Google account's connected apps page or by writing to us, and revocation takes effect on the next request.

86PaperSign's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Text messages

86PaperSign is operated by text message: you text a listing change to our number, we text back a preview, and nothing is applied unless you reply Y. During the founding pilot this program is invite-only. You join by asking us to enroll your mobile number and then texting the join keyword we give you, or by texting us first from an enrolled number. Message frequency varies with how often you text us; a typical exchange is one or two replies per request. Message and data rates may apply.

  • Reply STOP at any time to opt out. You will receive one confirmation text and nothing further.
  • Reply HELP for help, or email [email protected].
  • We keep the texts you send us and our replies as the record of what you asked for and what you approved, for the retention period below.
  • Mobile opt-in information, including your phone number and consent, is never shared with or sold to third parties or affiliates for marketing or promotional purposes. Our messaging provider, Twilio, processes messages on our behalf.

Your choices

Email [email protected] from the address you signed up with to get a copy of what we hold about you, correct it, or have it deleted. We will respond within thirty days. If you are unhappy with our response, tell us and we will review it again.

The demo

The interactive demo is a browser-only simulator. It sends nothing and never reads or writes a real Google Business Profile or Apple listing. The separate setup form does send the information you submit.

Changes to this notice

When we change this notice materially we will update the effective date above and, if you have a setup record with us, email you at the address on that record.