Quik2Pay Privacy Policy

Effective Date: May 14, 2026

Quik2Pay LLC ("we," "us," or "our") respects your privacy. This Privacy Policy ("Policy") explains how we collect, use, disclose, and protect your personal information when you use our payment advance, receivables collection, business management, and educational services (collectively, the "Services"). By using our Services, you consent to the practices described in this Policy.

This Policy supersedes all prior versions, including the version dated April 20, 2026, and has been updated to disclose data collection associated with our SMS text-messaging program (see Section 6), as well as features released previously (Quik Tools, AI-assisted summarization and transcription, mileage geocoding, the Notary Academy, and the cross-service Early Payout program) and the service providers we use.

1. Information We Collect

We collect the following categories of information:

Personal Information. Name, email address, phone number, physical address, date of birth, and Social Security number or Tax Identification Number (collected only when required for tax reporting or legally mandated identity verification).

Professional Information. Notary commission number, state of commission, expiration date, notary seal/certificate photo, government-issued identification photo (driver's license, passport, or equivalent), and any disciplinary or criminal-history disclosures you provide.

Financial Information. Bank account routing and account numbers (for verification and ACH disbursement), bank verification data (Stripe micro-deposit verification or voided check upload), and Stripe Connect account information (when you onboard to accept invoice payments). We store the routing number and the last four digits of your account number; the full account number is encrypted at rest. Financial transaction history, advance and payout records, and invoice details are also collected and maintained.

Quik Tools Data. When you use Quik Tools, we collect and store the data you enter, including:

• E-Journal entries: signer name, signer ID type and last 4 digits of ID number (we do not store the full ID number), date, act type, fee charged, signer signature collected/not, thumbprint collected/not, witness fields, and notes.
• Notarial Acts log: act type, state, fee, signer name, date.
• Mileage logs: trip date, start address, end address, miles, purpose, and (if you use the geocoding feature) latitude/longitude coordinates returned by Mapbox.
• Expense logs: vendor, amount, category, date, and uploaded receipt photos.
• Invoices: client name, billing address, line items, amounts, due dates, payment status, and (when applicable) Stripe payment processing data.
• Templates and recurring expense rules.
• 1099 forms you log for reconciliation.

Voice Recordings (CRM Voice Memos). When you record a voice memo in the admin/CRM tools, the audio is uploaded to Quik2Pay servers, immediately forwarded to OpenAI's Whisper API for transcription, and then discarded. We do not retain the audio file long-term. The transcript and the AI-generated summary are stored in your contact-activity log.

Receipt Photos and Other Uploads. Photos you upload (receipts, notary commission, ID documents, voided checks, invoice attachments) are stored in our hosted file storage and may be processed by AI for OCR (e.g., to extract vendor/date/amount from a receipt).

Communications. All communications between you and Quik2Pay, including email correspondence (sent from `mitch@`, `support@`, `notifications@`, or `invoices@quik2pay.com`), customer support interactions, in-app chat, dispute-related communications, Facebook Direct Messages (where you initiate them), and SMS text messages (where you have opted in — see Section 6).

Email Engagement Data. When we send you an email, we may include a 1×1 transparent tracking pixel that records when the email is opened and the IP address and user-agent of the device that opened it. This is used to measure deliverability and engagement. Apple Mail Privacy Protection and similar features may pre-fetch images, which can result in apparent opens that do not represent human reads.

Calendar Token Data. If you enable the Quik Tools iCal feed, we generate a private token that grants access to your signing schedule via a public URL. The URL contains the token. We log usage of these tokens (timestamp, user-agent) for security and rate-limiting purposes.

Outreach Recipient Data (Cold Outreach). Separately from notary user data, we maintain a database of public-source contact information for signing services and other potential business partners (the "Outreach Database"). This database is built from publicly available sources (company websites, the National Notary Association directory, NotaryCafe, NotaryRotary, public NSA listings, professional networking sites, and similar). When we send cold outreach to these contacts, we may track opens via the same 1×1 pixel described above. If you are a recipient of our cold outreach and would like to be removed from the Outreach Database, reply to any of our emails or contact support@quik2pay.com with the subject line "Remove me."

Crowd-Sourced AP Directory. When you save a signing-company AP/billing contact in the Cashflow tools, that email address (but not your identity, your notes, or your contact name) may be shared as an anonymous suggestion to other notaries who later look up the same company. This is opt-out at the row level: you can mark any saved contact as private in your Quik Tools settings.

Usage Data. IP address, device information, browser type, operating system, signup date, login times, pages viewed, feature usage patterns, and crash/error logs. This data is collected automatically when you interact with the Services.

Referral and Affiliate Data. When you refer another notary or signing service to Quik2Pay (or are referred by one), we record the referral relationship, attribution, earnings credited, and payout history. Referrers may see the name and approval status of users they referred.

2. How We Use Your Information

We use your information for the following purposes:

• To provide payment advances, collect receivables on your behalf, process payouts, and operate the Quik Tools, Notary Academy, and Cashflow features.
• To verify your identity, notary commission status, and eligibility for the Services, including AI-assisted document review (see Section 5).
• To communicate with signing services, escrow companies, title companies, lenders, and other Payment Sources for payment collection, pursuant to the Limited Power of Attorney you separately execute.
• To comply with legal obligations, including tax reporting (IRS Form 1099-K and 1099-NEC where applicable), anti-money laundering (AML) requirements, Know Your Customer (KYC) regulations, state money transmitter laws, and FCRA furnisher obligations (if and when we begin reporting to credit bureaus).
• To detect, prevent, and investigate fraud, unauthorized transactions, account takeover, and other illegal activities.
• To provide customer support and respond to inquiries.
• To send transactional and informational emails (and, where you have opted in, SMS).
• To send cold outreach to potential signing-service partners (Outreach Database recipients only).
• To improve our Services, develop new features, conduct internal analytics, A/B test product changes, and measure marketing effectiveness.
• To enforce our Terms of Service and Service Agreement, including collection of debts owed to us.

3. Information Sharing and Disclosure

We share your information only as necessary to operate our Services and comply with legal requirements. We do not sell your personal information.

Service Providers

We share data with the following categories of third-party service providers, who are bound by confidentiality obligations and are prohibited from using your personal information for purposes other than providing services to Quik2Pay.

Payment & Banking Processors.

• Stripe, Inc. — bank account verification, ACH micro-deposits, subscription billing, Stripe Connect for invoicing payments.
• Mercury (Mercury Technologies, Inc., powered by partner banks) — business banking and notary payout processing via ACH.

AI & Machine Learning Processors. We use third-party AI providers to power features such as document verification, chat support, voice memo transcription, receipt OCR, AI-drafted chase emails, AI-drafted blog content, and AI-generated images. The data sent to each provider is limited to what is necessary for the requested operation. Per current provider terms (which we do not control and which you should review), API usage is not used to train provider models.

• Anthropic, PBC (Claude) — AI verification of submitted documents, chat support responses, voice memo summarization, receipt categorization, AI-drafted client follow-up and chase emails, blog content generation, and other text generation tasks.
• OpenAI, L.L.C. — voice memo audio transcription (Whisper) and AI-generated images (DALL·E 3) for blog posts and social content.

Email & Messaging.

• Resend, Inc. — sending and tracking transactional and outreach email, including delivery, bounces, opens (via 1×1 pixel), and clicks.
• Twilio, Inc. — delivering SMS text messages to notaries who have opted in. Twilio transmits messages on our behalf and is contractually prohibited from using your information for any other purpose.

Hosting, Storage, and Infrastructure.

• Vercel, Inc. — application hosting, serverless functions, edge runtime, and cron job execution.
• Supabase, Inc. — database (PostgreSQL), authentication, file storage, and row-level security.
• Cloudflare, Inc. — DNS, email forwarding for inbound mail (e.g., support@), and edge protection.
• Google LLC — Google Workspace for inbound and outbound founder/support email, and (if and when enabled) Google Business Profile API integration.
• Mapbox, Inc. — geocoding of mileage trip start/end addresses when you use the auto-distance feature.

Social and Communication Platforms.

• Meta Platforms, Inc. (Facebook, Instagram) — when you initiate communication with us via Facebook Direct Message, your message and metadata are subject to Meta's privacy policy. Quik2Pay's Social Post Autopilot publishes our own marketing content to Facebook and Instagram via the Meta Graph API; this does not involve your personal data unless you interact with the post.

Payment Sources. Signing services, escrow companies, title companies, lenders, and other entities from whom we collect payments on your behalf. We share your name, payment details, and invoice information as necessary to facilitate collection.

Partners (Early Payout). Signing services and other partners integrated with Quik2Pay's Early Payout program receive notifications when one of their notaries accepts an Early Payout offer. These notifications include the notary name, signing reference, payout amount, and the new payment instructions (i.e., remit to Quik2Pay instead of the notary).

Referrers. When you are referred to Quik2Pay by another notary or signing service, your referrer can see your name and your approval status (but not your bank info, journal data, or other private information).

Legal and Regulatory Authorities. We may disclose your information to government agencies, law enforcement, regulatory bodies, or courts when required by law, subpoena, court order, or legal process, or when necessary to protect our rights, property, or safety, or that of others.

Business Transfers. In the event of a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your information may be transferred to the acquiring entity or successor, subject to the same privacy protections then in effect.

With Your Consent. We may share your information with other parties when you provide explicit consent.

4. Data Security

We implement industry-standard encryption, access controls, and security practices to protect your information, including TLS/SSL encryption for data in transit and AES-256 encryption for data at rest (where supported by our storage providers). We maintain administrative, technical, and physical safeguards designed to protect against unauthorized access, use, or disclosure. However, no system is 100% secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials, including any tokens (calendar feed token, magic-link tokens, share links). Treat these tokens like passwords.

5. AI Processing Disclosure

Several Quik2Pay features use AI processing. Below is a summary of how AI providers receive and handle your data:

Anthropic Claude. When you use AI verification, AI chat, AI chase email drafts, AI summary of voice memos, AI receipt categorization, or AI blog generation, the relevant text and (in some cases) image data is sent to Anthropic's API for processing. Per Anthropic's commercial API terms, your data is not used to train Anthropic's models.

OpenAI Whisper. When you record a voice memo, the audio is sent to OpenAI's Whisper API for transcription and is not retained by OpenAI per their API data-handling policy. The resulting transcript is stored in your contact activity log on Quik2Pay.

OpenAI DALL·E. When the auto-blog or social autopilot generates an image, the image prompt (which does not include your personal data) is sent to OpenAI. The generated image is stored on Quik2Pay servers.

We do not allow AI providers to use your data to train their public models. If a provider's terms change in a way that affects this commitment, we will update this Policy and notify you.

You can request that we exclude specific records from AI processing by contacting support@quik2pay.com. Some core features (e.g., AI verification of submitted commission documents) cannot be opted out of without disabling the feature itself.

6. SMS and Text Messaging

Quik2Pay offers an optional SMS text-messaging program. This section describes how we handle information related to that program.

Opt-in. SMS messages are sent only to notaries who have given express consent — by checking the SMS consent box next to the phone number field when creating an account at quik2pay.com/signup, or by replying START to a Quik2Pay message. Providing consent is optional and is not a condition of using the Services.

Types of messages. SMS messages from Quik2Pay include account check-ins, onboarding assistance, support responses, time-sensitive account notifications, and occasional account-related offers (such as a free signing-submission code).

Information we collect. When you opt in, we collect and store your mobile phone number, the date and time of your consent, and the content of the SMS messages you exchange with us. Replies you send are logged to your account so our team can respond.

Message frequency and rates. Message frequency varies based on your account activity and your interactions with us. Message and data rates may apply, depending on your mobile carrier and plan.

Opt-out and help. You may opt out at any time by replying STOP to any message, which ends the SMS program for that number. Reply HELP for assistance, or contact support@quik2pay.com. Opting out of SMS does not affect transactional email or in-app notifications.

No sharing of mobile opt-in data. We do not sell, rent, or share your mobile phone number or SMS opt-in information with third parties or affiliates for their own marketing or promotional purposes. Mobile opt-in data and consent are not shared with any third parties for any purpose other than delivering the messages you have asked to receive. SMS messages are delivered through our messaging provider, Twilio, Inc., solely to transmit messages on our behalf.

Carrier disclaimer. Mobile carriers are not liable for delayed or undelivered messages.

7. Data Retention

We retain your personal information for as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Financial and transaction records are retained for a minimum of seven (7) years to comply with IRS and financial regulatory requirements.

Notarial journal entries (E-Journal data) are retained according to your state's notarial recordkeeping requirements, which currently range from 5 to 10+ years depending on the state. Quik2Pay retains your E-Journal data for the longest applicable retention period across the states in which you have indicated you are commissioned, plus one (1) additional year, unless you request earlier deletion in writing and we determine that deletion is consistent with applicable law.

Voice memo transcripts are retained as part of your contact-activity log for as long as the related contact record exists. The original audio file is discarded immediately after transcription.

Email engagement data (opens, clicks) is retained for two (2) years to support marketing analytics and deliverability.

Outreach Database records (cold outreach contacts) are retained until the recipient requests removal or until we determine the contact is no longer accurate.

Account data is retained for the life of your account plus the longest applicable regulatory retention period after termination. After that period, we will securely delete or anonymize your information unless longer retention is required by law.

You may export your data at any time using the in-app export tools or by request to support@quik2pay.com.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements (financial and notarial records cannot be deleted before their statutory retention periods expire).
• Objection: Object to certain processing of your information.
• Portability: Request transfer of your information to another service provider in a structured, commonly used format.
• Opt-out of AI processing: Request that we exclude specific records from non-essential AI processing (see Section 5).
• Opt-out of marketing communications: Unsubscribe from marketing emails using the unsubscribe link in any marketing message. Transactional emails cannot be unsubscribed from while you have an active account.

You may exercise these rights by emailing support@quik2pay.com. We will respond to verified requests within thirty (30) days. Certain information may be exempt from such requests under applicable law. We may require verification of your identity before processing your request.

9. State-Specific Privacy Rights

California Residents. Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have additional rights including the right to know, the right to delete (subject to exceptions), the right to correct, the right to opt out of "sale" or "sharing" of personal information, and the right to limit use of "sensitive personal information." You may designate an authorized agent to make requests on your behalf. We do not sell or share personal information for cross-context behavioral advertising.

For purposes of CCPA, the categories of personal information we collect include:

1. Identifiers (name, email, phone, IP address, account login credentials)
2. Records described in Cal. Civ. Code § 1798.80(e) (signature, address, bank account, government ID, professional license)
3. Protected classifications (date of birth — for age verification only)
4. Commercial information (transaction history, signing records, invoices)
5. Internet/network activity (browsing on quik2pay.com, app usage)
6. Geolocation data (IP-based, plus mileage trip start/end addresses if you use that feature)
7. Audio information (voice memo recordings — transcribed and immediately discarded)
8. Professional or employment information (notary commission)
9. Inferences (e.g., risk score from AI verification)

We collect these categories for the business and commercial purposes described in Section 2.

Sensitive Personal Information under CPRA includes Social Security Number, account credentials, precise geolocation (when you use mileage geocoding), and government-issued identification numbers. We use sensitive personal information only for the purposes for which it was collected and as permitted by CPRA Section 7027(m).

Nevada Residents. Nevada law allows you to opt out of the sale of personal information. We do not sell personal information as defined under Nevada law.

Other States. Residents of states with comprehensive privacy laws (Colorado, Connecticut, Virginia, Utah, Texas, and others) have rights similar to those described above for California. Contact support@quik2pay.com to exercise your rights.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. Notaries must be at least 18 years old in all U.S. states. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will take steps to delete such information promptly.

11. International Data Transfers

Your information is stored and processed in the United States. Some of our service providers may process data in other countries. By using our Services, you consent to such transfers. We rely on standard contractual clauses or other lawful transfer mechanisms where applicable.

12. Third-Party Links

Our Services may contain links to third-party websites or services (including affiliate links in the Notary Academy). We are not responsible for the privacy practices of such third parties. We encourage you to review their privacy policies before providing them with your information.

13. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by posting the updated Policy on our website with a new effective date or by sending you an email notification. Material changes take effect thirty (30) days after notice unless required earlier by law. Your continued use of the Services after such changes constitutes acceptance of the updated Policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Quik2Pay LLC

Email: support@quik2pay.com

Mailing address: Las Vegas, Nevada

Governing Law

This Privacy Policy is governed by the laws of the State of Nevada, without regard to its conflict of law principles. Any disputes arising from this Policy shall be resolved in accordance with the dispute resolution provisions in our Terms of Service.