Krosson

Privacy

Last updated 25 August 2026

Under review. How Krosson handles your information is described accurately here. The formal terms are still with counsel and may change.

Krosson is run by Krosson Digital Marketing in Idaho. This page says what we record, why we need it, and who else it passes through. It covers two different people: the businesses who use Krosson, and their customers who receive and sign agreements.

If you use Krosson to send agreements

When you ask for an account we record your name, email address, business name, and — if you give them — your website, phone number, and the kind of work you do. Accounts are approved by hand, so a person at Krosson reads this before deciding.

After that we hold the agreements you write and send: the wording, the values you fill in, the amounts, and who each one went to.

If someone sent you an agreement to sign

The business sending it gives us your name, your email address, and sometimes your phone number. We use them to deliver the agreement and to tell that business what happened to it.

When you sign, we record more, and deliberately:

  • the name you type as your signature
  • the exact wording of the agreement at that moment, frozen so it cannot be edited afterwards
  • a fingerprint (SHA-256) of that document
  • the time you agreed to sign electronically, and the time you signed
  • your IP address and the identification your browser sends

That last one is the part worth explaining. An electronic signature is only worth something if it can be shown later that a particular person agreed to a particular document at a particular moment. The IP address and browser identification are part of that record. We collect them to make your signature hold up, not to build a profile of you, and they are never used for anything else.

If you decline instead of signing, we record that you declined, when, and the reason if you give one.

Where it is kept

In a Postgres database hosted by Supabase in the western United States. Sealed PDFs of signed agreements are held in private storage — reachable only through a link Krosson generates for someone who has the right to see it, never by guessing an address.

Who else it passes through

  • Supabase — the database, file storage, and sign-in
  • Vercel — hosting
  • Resend — delivering email, so they handle the recipient address and the message
  • Square — deposits, when a business collects one
  • Google — signing in, if you choose to; and your calendar, if a business connects one

We do not sell anything to anyone, and we do not use what we hold for advertising.

Your Google account

Two separate things, asked for separately, and either can be refused without losing the other.

Signing in. If you choose Google instead of a password, we receive your email address and your name. Nothing else.

Your calendar. A business can connect one of its own Google calendars so that a signed agreement puts the work on the day without anybody retyping it. That grants Krosson two permissions, both deliberately narrow: to create and change events on calendars you own, and to see the names of your calendars so you can choose which one. Krosson uses the first only to add an event for an agreement signed through Krosson, and the second only to show you that list while you are choosing. We do not read your existing appointments, and nothing from your calendar is stored beyond the name and time zone of the calendar you picked.

Krosson’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. That data is never sold, never used for advertising, never used to build a profile, and never given to a human to read except where you ask us to fix something, where the law requires it, or where it is necessary to investigate abuse.

You can disconnect at any time in Settings, which stops Krosson writing anything further. Events already in your calendar stay where they are — they are yours. You can also remove Krosson from your Google account directly, at myaccount.google.com/permissions, which has the same effect from Google’s side.

Card details

Krosson never sees them. Paying a deposit happens on a page Square hosts, under Square’s own address. Your card number does not pass through Krosson’s systems at any point, which is the whole reason for doing it that way. We learn only that a payment succeeded and for how much.

How long it is kept

Signed agreements and their signature records are kept for as long as the business that sent them keeps their account, and afterwards for as long as the law requires an agreement to be retrievable. An agreement you signed is evidence of something you agreed to — deleting it on request would destroy the record for both sides, so we cannot do that while it may still matter.

Everything else — draft agreements, templates, account details — is removed when an account is closed.

Asking us about your information

Write to contact@krosson.com and ask. We will tell you what we hold about you and correct anything that is wrong. If you want something deleted we will do it wherever the paragraph above does not stop us, and we will tell you plainly if it does.

If a business used Krosson to send you an agreement, they decided to contact you — not us. For questions about why they have your details, ask them; we will help you reach them if you cannot.

Changes

If this page changes in a way that matters, we will say so by email to account holders before it takes effect.

Questions about anything here? Write to contact@krosson.com — a person reads it.

Back to sign-up