Privacy Policy

This Privacy Policy explains what information Nyza Creations LLC, doing business as SaffronSeal (“we,” “us”), collects through the Platform, how we use it, who we share it with, and the choices you have. Washington residents: our Consumer Health Data Privacy Policy also applies to health-related information.

1. Information we collect

• Account information — name, email address, phone number and role. If you set a password we store only a bcrypt hash. If you sign in with Google or Apple we store the identifier and email that provider gives us (Apple may give us a private relay address). If you add a passkey we store only its public key and a label; the private key never leaves your device.
• Booking information — the document type, signing address, schedule, signer names and contact details, notes, and messages exchanged for a booking. If you upload a document we store it only to complete that booking and give the assigned Notary access to it.
• Assisted requests and public business contacts — your service area, service type, preferred timing, and consent to contact notaries; public notary business names, contact emails, source websites, replies, and opt-out preferences.
• Notary credential information — for Notary accounts: commission state, number and expiration; whether we verified it against the state registry; E&O insurance details; background-check status; certifications; and your service area, which we geocode to place you on the map.
• Reports and blocks — if you report a message or a person, we keep your report, the reason you chose, any note you add, and a copy of the reported message. If you block someone, we keep that block so messages stop in both directions.
• Payment information — payments are handled by Stripe. We never see or store your full card number; we store the Stripe identifiers needed to process a booking, issue a payout or refund, and produce receipts.
• Usage information — device, browser, IP address and how you interact with the Platform, collected automatically to keep the service working and secure.

2. How we use information

• To create and secure your account and to verify your email address;
• To match bookings to Notaries near the signing address and to price them correctly for the signing state;
• To process payments, refunds and Notary payouts through Stripe Connect;
• To verify Notary commissions against public state registries before a profile goes live;
• To send booking confirmations, reminders, receipts and service messages;
• To respond to support requests;
• When you request it, to find public notary businesses, contact candidates about your appointment, and help interested notaries complete onboarding;
• Only after you allow AI search, to interpret a plain-language search request you type into the search assistant and turn it into search filters (document type, place, timing, language), and to email you the shortlist you ask for;
• To keep conversations safe: we mask offensive language in messages automatically, and our team reviews messages that you or the other person report;
• To detect fraud and abuse and to comply with the law.

We do not sell your personal information, and we do not use the contents of documents you upload for anything other than completing the booking they were uploaded for.

3. Who we share information with

• The Notary or Customer on your booking — the minimum needed to complete the appointment: name, contact details, document type, address and notes.
• Prospective notaries — with your consent, we share the service type, city or ZIP code, appointment method, number of acts, and preferred timing. Initial outreach does not include your name, contact details, street address, private description, or documents. Interest alone does not confirm an appointment.
• Stripe, Inc. — to process payments and, for Notaries, Connect payouts and tax forms. Stripe has its own privacy policy.
• Sign-in providers — Google LLC and Apple Inc., only when you choose to sign in with them.
• Service providers we use to run SaffronSeal — email delivery (our own Nyza Mail platform on Amazon Web Services), hosting and document storage (OVHcloud and Cloudflare), and address geocoding (the U.S. Census Bureau geocoder and OpenStreetMap Nominatim, which receive the address only). Each is bound to use your data only to provide that service to us.
• OpenRouter and its model and search providers — only after you allow AI search, the text you enter in the search assistant is sent to OpenRouter and the AI model provider it routes to, to produce search filters. Your name and account details are not sent with it. You can withdraw that permission at any time: in the app under Account, or on the website by unticking the box under the search field. Public business discovery sends the service area and appointment method to search providers to find candidate businesses. We do not include your account identity, private request description, or uploaded documents in business discovery. Do not enter document contents or other people's personal details in the search assistant.
• State notary registries — we look up a Notary's commission on the public registry; nothing is sent to the state beyond the lookup.
• Law enforcement or regulators, only when required by law or to protect the safety of our users.

4. Data retention

We keep account and booking records for as long as your account is active and for a reasonable period after, to satisfy legal, accounting and dispute-resolution needs, including the notarial-record retention periods some states require (up to ten years for remote notarizations in Washington). Uploaded documents are deleted when the booking closes unless a dispute is open. You can ask us to delete your account (Section 6); some records may be retained where the law requires.

Assisted requests can be cancelled in My requests. Notaries can decline a specific opportunity or use the opt-out link in an outreach email to stop future opportunity outreach. We retain the minimum suppression record needed to honour an opt-out.

5. Cookies and analytics

We use essential cookies to keep you signed in and to protect sign-in flows, and Stripe and Cloudflare set their own on checkout and security checks. We do not use third-party advertising cookies. We also use Google Analytics 4 for aggregate usage statistics, and it runs only after you accept analytics in the cookie banner — opt-in everywhere, not just where the law requires it; a Global Privacy Control signal is honoured as an opt-out. The full inventory and the withdrawal control are in our Cookie Policy.

6. Your rights

Depending on where you live you may have the right to access, correct, delete or export your personal information, or to object to certain uses of it, including under the California Consumer Privacy Act and the privacy laws of Washington, Virginia, Colorado, Connecticut, Oregon, Texas and other states. To exercise any of these rights, email privacy@saffronseal.com. We will verify the request against your account and respond as required by applicable law, and we will not discriminate against you for exercising a right.

7. Children's privacy

SaffronSeal is not directed to, and we do not knowingly collect information from, anyone under 18.

8. Security

We use encryption in transit, hashed passwords, passkey support, signed and expiring links, and role-based access controls to protect your information. No system is perfectly secure, and we cannot guarantee absolute security. Report a vulnerability to privacy@saffronseal.com.

9. Changes to this policy

We may update this Privacy Policy. We will update the “Last updated” date when we do and flag material changes more prominently.

10. Contact

Questions about this policy or your data? Email privacy@saffronseal.com, or write to Nyza Creations LLC, 3850 Kitsap Way, Ste 104, PMB 1247, Bremerton, WA 98312.