Privacy Policy

Repayment planner

The repayment planner calculates proposed schedules in your browser. Its amounts, dates and proposed fee terms are not saved to your PactNest account or sent to a payment provider. You can download an English PDF or an editable JSON file and reopen that file later. These files are created on your device. Uploaded agreements use the storage and sharing described below.

Who operates PactNest

PactNest is owned and operated by Heartwave Theory LLC, based in Dalton, Georgia 30720, United States. Contact pactnest@heartwavetheory.com for support, privacy questions or abuse reports. This inbox is checked daily; response times depend on the request.

TODO — operator confirmation needed: Provide an appropriate public mailing address. The location above is not a complete mailing address.

Information used by the app

Account access uses your email and verification records. In the mobile app, you can set a password after verifying your email. We store a salted password hash, not a readable password, in the account database. Mobile sign-in tokens are stored using your device’s secure storage and can last up to 30 days; signing out revokes that device’s token, and resetting your password ends existing account sessions. Password hashes, active sessions and reset codes are excluded from the independent Cloudflare R2 recovery exports; after restoration, users must set a fresh password by verifying their email. A proposal includes the title, original PDF, proposer name, member names and email addresses, and selected email languages. Anything you include in a PDF becomes part of the document shared with its participants.

Signing records include the signer's self-declared name, email, account or guest reference, email-verification reference, signature strokes and canvas dimensions, consent text and version, server timestamp, browser user-agent and document/evidence fingerprints. Inbox verification confirms access to an email address; it does not verify government identity.

The deal interview stores the draft title, your conversation, answers, AI assessments and summary under your account. Invitation records include invitation contents, provider acceptance status, preference actions and suppression information. The app has no dedicated payment-card, phone, date-of-birth or government-ID fields. Do not put passwords, verification codes, payment-card details, bank logins or government ID numbers into interview answers.

How information is used and shared

The app uses this information to confirm access, prepare proposals and summaries, deliver requested emails, record signatures, produce downloads, limit misuse and respect invitation preferences.

Agreement participants can view the document, roster, names, emails and signing status. Completed signing-record downloads include the evidence described above. Other participants can retain downloaded copies independently of PactNest.

Heartwave Theory LLC does not sell customer information, use customer documents for its own advertising or AI-model training, or share customer information for unrelated marketing. Information is shared with agreement participants and providers as described in this notice to deliver the service.

Access to saved interview drafts is restricted by the app to the sender account. Hosting operators and service providers process data to run the service; account access restrictions are not a promise that providers cannot process the information.

Service providers

OpenAI Sites hosts the app and provisions its Cloudflare resources. Cloudflare D1 holds account, agreement, interview and signing metadata; Cloudflare R2 holds PDFs, signature evidence and generated exports. Earlier agreements also use ChatGPT sign-in and its account identity.

Resend delivers verification and invitation emails. It receives the destination address and message content. Invitations identify the proposer and include private review and preference links; they do not attach the contract or include its title.

When you use the enabled AI agreement helper, the server sends your submitted description, form answers, associated timestamps, topic information and prior assessment to OpenAI. When you request an agreement draft, it sends the current details you reviewed and confirmed. The app requests that AI responses not be stored by the API. This does not rule out other retention by the provider.

No advertising, analytics or session-recording scripts were found in the application code. Hosting and email-provider logging or tracking settings are managed separately and have not been independently verified.

TODO — operator confirmation needed: Confirm provider account settings, processing locations, provider retention, contracts and any processing outside the application code. The operator's practices above do not establish providers' independent retention or data-use settings.

Cookies and browser drafts

Short-lived secure cookies support sign-in and email verification. A language preference is kept in local storage. A proposal draft, including its selected PDF, is saved in IndexedDB to survive sign-in. Its rolling expiry is 24 hours after the latest save; expired entries are cleaned up on a subsequent draft load or clear. Closing a tab alone may leave its draft data in browser storage. See the Cookie Policy for the inventory and controls.

Retention and deletion

Mutual termination records are stored separately from original agreements. After every original signer approves termination, the contract is marked Terminated and remains available for download for 30 days. It then disappears from participant accounts and its invitation and document links stop providing access. The agreement, original and signed PDFs, signatures, termination evidence and related invitation and verification records are scheduled for permanent deletion from PactNest storage and its managed recovery copies at that same 30-day deadline. Scheduled cleanup checks every five minutes; service failures can delay physical deletion and trigger an owner alert. Termination approvals collect the same signing evidence described above, together with the termination terms, original signer references and effective timestamp.

Outside this mutual-termination rule, fixed retention periods for active agreements, unfinished proposals, accounts and separately saved drafts have not been established. Expired authentication records can remain in storage even though they no longer grant access. Canceling an incomplete request, or an unsigned member declining it, stops further signing but preserves the document and existing evidence. Cancellation also removes document access for recipients who have not signed; existing signers and the sender retain access. Copies already downloaded or retained in recipients’ email cannot be recalled. Cancellation alone does not erase data or rescind an agreement. Independently downloaded backup archives must be removed by their holder; automatic cleanup cannot erase local files. Infrastructure-provider recovery copies and logs are governed by the provider’s retention settings, which have not been independently verified.

The planned offer includes free download access for seven days after all requested participants sign, and optional continued storage for all documents in one account at US$5 per month. There will also be a separate US$5 fee per contract upload. Free download access does not waive the planned upload fee. When a storage subscription ends, the planned download period is one additional month.

These paid features and access limits are not active. This announcement does not enroll you or charge you. Neither the seven-day window nor the one-month download period is a promise that stored data will be deleted when it ends.

Keep copies of documents you need. PactNest does not guarantee permanent storage or recovery. Temporary browser drafts are encrypted with a key kept in the current tab. Signing out clears draft storage across open tabs on this browser. Earlier plaintext drafts are upgraded when restored; expired drafts are removed when draft storage is opened. This does not protect against malicious code running in an already-open tab or replace keeping your own copies.

TODO — operator confirmation needed: Before launching paid storage, define when cancellation takes effect, missed-payment handling, download notices, deletion procedures and access for other signers. Separately define retention for active agreements, unfinished proposals, interviews, accounts, expired authentication records, abuse records and provider logs, and establish a reviewed preservation process for disputes or legal requirements.

Request protection

To limit abuse, PactNest stores shared request counters and counters associated with a hashed version of an authenticated participant’s email address. The counters include an action category, attempt count and expiry time. A hashed identifier is pseudonymous, not anonymous. Request counters do not contain raw email addresses, IP addresses, session tokens or document contents.

Counter windows last from ten seconds to one hour. Expired counters stop restricting requests and are reset when reused or removed in small batches as traffic continues. This cleanup is separate from agreements, authentication history, abuse reports and provider backups. Temporary request limits can affect availability during unusually heavy traffic.

Security monitoring

PactNest keeps aggregate counts of failed sign-ins, denied access, request limits, completed PDF uploads and application errors, plus timestamps and the types of actions taken in owner security controls. These records do not contain passwords, sign-in tokens, raw email or IP addresses, or agreement contents. They are scheduled for deletion after 30 days when the monitoring check runs and are excluded from agreement recovery exports.

A separate Cloudflare monitor checks website availability and backup and cleanup health. It stores its current check and notification state and sends operational alerts to the owner through Resend. It receives only aggregate counts and operational status, not customer documents. Hosting and email-provider logs have separate retention settings.

Requests and choices

You can use an invitation's preference link to decline a request, stop future invitations to that address or report abuse. These choices do not undo a signature already recorded.

For privacy questions or requests concerning access, correction or deletion, contact pactnest@heartwavetheory.com and describe your request. This inbox is checked daily. Do not email passwords, verification codes or identity documents. Depending on applicable law, you may have additional rights. Signed records and copies already held by other participants may require different handling from account details.

TODO — operator confirmation needed: Finish the request-handling process, checks to confirm the requester is entitled to act, response procedures, applicable regional rights and appeal requirements. Daily inbox checks are not a response deadline.

Age and service area

PactNest is currently offered only to users in the United States who are aged 18 or older. Do not use the service if you are under 18. Email verification confirms inbox access; it does not verify age or location. Contact pactnest@heartwavetheory.com if you believe a child has submitted personal information.

Security, browser signals and changes

The application uses server-side access checks, hashed session tokens, short-lived codes, limits on requests and a no-referrer policy. These safeguards do not eliminate all risk. Use a private device for confidential drafts and keep invitation links and codes private.

The app does not currently act on Do Not Track or Global Privacy Control signals, and no optional app trackers are enabled. Provider behavior and any legally required opt-out handling must be reviewed before adding tracking.

This page carries a review date. Material changes to data practices need a communication process before they take effect.

TODO — operator confirmation needed: Confirm security incident handling and the method for notifying affected users of material policy changes.