Effective October 21, 2026 · Last updated October 21, 2026
1. Who this policy covers
This policy covers the public website at signshopcraft.com and the SignCraft web application. SignCraft is quoting and job-management software for sign shops.
The shop that uses SignCraft controls its customer and job records and decides which staff Google accounts may sign in. If you are a customer of a shop that uses SignCraft, contact that shop first about access, correction, or deletion of your details. We process shop data on the shop’s behalf to run the product.
2. Public website
Marketing pages do not set advertising cookies and do not load a separate advertising pixel. They may store, in the browser for the current tab only:
- Campaign parameters from the URL (
utm_source,utm_medium,utm_campaign,utm_term,utm_content,gclid,fbclid), so we can understand how you found us. These clear when the tab closes. - Preferences you set on the marketing site, such as light or dark theme, stored only in your browser.
Our hosting provider (Google Firebase Hosting) records standard request logs such as IP address, user agent, and the URL requested, for security and operations.
If you email us at the address on this site, we keep the message and your address to reply.
3. What the product collects
Account and access
When you sign in with Google, we receive your Google account identifier, email address, and display name as provided by Google Authentication. We use them to authenticate you, check the shop allowlist, and attribute actions in the audit log.
Shop and customer records
Authorized shops create and store:
- Shop settings: name, contact details, logo URL, branding, quote and invoice terms, tax settings, and follow-up templates.
- Customers: names, companies, emails, phones, and addresses entered by the shop.
- Products and rates, quotes, jobs, artwork proofs, invoices, and recorded payments.
- Outbound email and SMS delivery records, follow-up logs, and an append-only audit log of changes.
- Per-account request counters used for rate limiting.
Optional features
- Browser alerts: if a staff member enables alerts, a Firebase Cloud Messaging device token is stored so the shop can receive push notifications (for example, when a customer responds to a quote).
- SMS: if the shop uses SMS and a customer has a phone number on file, that number is used to send quote, invoice, follow-up, or proof messages the shop initiates.
- Address autocomplete: when staff use address fields, Google Maps / Places may process the text typed to suggest addresses.
- QuickBooks Online: only if the shop connects its own company file; customer, invoice, and payment data the shop chooses to sync is sent to Intuit under the shop’s QuickBooks relationship.
Technical and product usage data
Firebase Authentication, Hosting, Firestore, Cloud Functions, Cloud Storage, App Check, and related Google infrastructure process request logs, device and browser information, approximate region, and error data to operate and secure the service. The signed-in application also uses Firebase Analytics (GA4) for aggregate product usage. Marketing pages do not load that analytics SDK.
The browser does not read or write the shop database directly. Reads and writes go through our backend, which checks the signed-in account against the shop’s allowlist.
4. How we use information
- Authenticate users and enforce shop access.
- Run quoting, jobs, proofs, invoicing, backups, and exports.
- Send the email, SMS, and push messages a shop initiates or enables.
- Secure the service, prevent abuse, and diagnose errors.
- Understand aggregate product usage so we can improve SignCraft.
- Communicate with shops about access, support, and material policy changes.
We do not sell shop or customer lists, quote contents, or personal data. We do not use shop content to train third-party AI models or to build advertising audiences.
5. Service providers
- Google Firebase — authentication, hosting, database, file storage (including proof images), server functions, analytics, App Check, and push messaging.
- Resend — delivery of quote, invoice, and follow-up email when the shop sends them.
- Twilio — SMS messages when the shop uses SMS features.
- Google Maps / Places — address autocomplete in shop and customer forms.
- Intuit QuickBooks Online — only when a shop connects its own company file.
- Stripe — payment processing for SignCraft subscription billing when you choose a paid plan.
These providers may process data in the United States or other regions where they operate. Their own terms and privacy policies apply to their processing.
6. Retention
Shop records are kept while the shop uses SignCraft. When a shop asks us to close its account, we delete its records from the live database, subject to backup copies that expire on our providers’ normal schedules (including point-in-time and export backups) and to information we must retain by law. Account and technical logs are kept only as long as needed for security, operations, and legal obligations.
7. Your choices
- Export. A shop owner can download a full JSON backup and a QuickBooks-ready CSV at any time from the product.
- Correct. Customer, product, and shop records are editable in the app by authorized staff.
- Delete. Email hello@signshopcraft.com to request account closure or deletion. We will confirm what will be removed and when.
- Push alerts. Staff can disable browser alerts in the product; doing so stops use of that device token for SignCraft notifications.
If an end customer of a shop wants their details corrected or removed, they should contact that shop. The shop controls its customer records.
8. Security
Access requires a Google account authorized for the shop. The database rejects direct browser writes; proofs are checked by file signature; writes are rate limited and audited. No system is perfectly secure. Do not store secrets in SignCraft that you would not entrust to a normal business SaaS tool. Report security concerns to hello@signshopcraft.com.
9. Children
SignCraft is a business tool for sign shops. It is not directed at children, and we do not knowingly collect personal information from anyone under 16.
10. Changes
If this policy changes materially, we will update the date above and notify shops by email where practical. The current version is always at this URL.
11. Contact
Questions about this policy or a shop’s data: hello@signshopcraft.com.
This policy describes current SignCraft practice in plain language. It is not legal advice.