Generate a legally sound, state-compliant Bill of Sale in under 2 minutes. No account. No fees. Just results.
All 50 StatesPrint-Ready PDFMotor VehiclesBoats & EquipmentFarm EquipmentFirearmsPrecious MetalsPersonal Property
1
Parties
2
Item
3
Sale
4
Preview
Seller Information
Upload a PNG, JPG, or GIF of your handwritten signature. It will appear on the document in place of the blank signature line.
Buyer Information
Upload a PNG, JPG, or GIF of your handwritten signature. It will appear on the document in place of the blank signature line.
Item Being Sold
Sale Terms
Review & Disclaimer
This Bill of Sale is generated for informational purposes only and does not
constitute legal advice. Requirements for valid bills of sale vary by state; for high-value,
financed, or legally complex transactions, we strongly recommend consulting a licensed
attorney. You are solely responsible for verifying the accuracy of all information entered.
Boss BOS Generator and its operators accept no liability for errors, omissions, or any
consequences arising from the use of this document.
Your Bill of Sale
Saved Documents
Privacy Policy
Effective date: March 13, 2026 • Last updated: March 13, 2026
1. Who we are
Boss BOS Generator ("we", "us", "our") operates the Boss BOS Generator web application. This policy explains what data we collect, why, how it is protected, and your rights under applicable law including GDPR and the California Consumer Privacy Act (CCPA).
2. Data we collect
a) Data you provide
Account email address — collected when you register for a free account to save documents.
Bill of Sale form data — seller/buyer names, addresses, item details, and sale terms that you enter and choose to save. This data is stored only if you are signed in and click "Save to Account".
b) Automatically collected data
Anonymized usage metrics — when a document is created or deleted we record the item type (e.g. "vehicle") and the US state of sale (e.g. "TX"). No name, email, IP address, or any other personally identifiable information is included in these metrics.
Server logs — standard AWS infrastructure logs (CloudFront, API Gateway) may capture IP addresses and request metadata. These are retained for 90 days for security and diagnostics and are never sold or shared.
c) Data we do NOT collect
No cookies, tracking pixels, or third-party analytics scripts.
No credit card or payment data — the service is entirely free.
No device fingerprinting.
3. How we use your data
To authenticate you and associate saved documents with your account.
To allow you to retrieve, reprint, and delete your saved documents.
To generate aggregate, anonymized statistics (e.g. "100 vehicle BOSs generated in Texas this month") that help us improve the service.
To detect and respond to security incidents via server logs.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Encryption & security
In transit: All traffic is encrypted with TLS 1.2 or higher (enforced by CloudFront).
At rest: All stored data — S3 site assets, DynamoDB documents, and CloudWatch logs — is encrypted using AWS KMS Customer-Managed Keys (CMKs) with annual automatic key rotation.
Authentication tokens are held in memory only (never written to localStorage or cookies) and expire after 1 hour of inactivity.
Access control: All API routes are protected by Cognito JWT authorization. No cross-user data access is possible by design.
5. Data retention
Saved documents are retained until you delete them or close your account.
Server logs are retained for 90 days, then automatically purged.
Anonymized aggregate metrics have no expiry (they contain no personal data).
6. Your rights
Depending on your jurisdiction you may have the following rights. To exercise any of them contact us at the address below.
Access — request a copy of personal data we hold about you.
Rectification — request correction of inaccurate data.
Erasure ("right to be forgotten") — request deletion of your account and all associated documents.
Portability — export your saved documents via the "Saved Documents" panel (JSON format).
Objection / Restriction — object to or request restriction of processing.
California residents (CCPA) — you have the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.
7. Third-party services
Amazon Web Services (AWS) — hosting, authentication (Cognito), and database (DynamoDB). AWS acts as a data processor under our instructions. See AWS Privacy Notice.
FreeIPAPI (freeipapi.com) — an optional convenience lookup that reads your IP address to pre-select your US state. Your IP address is sent to FreeIPAPI to perform this lookup; the result is used only to pre-fill a dropdown and is not stored.
Zippopotam.us (api.zippopotam.us) — when you type a ZIP code, that ZIP code is sent to Zippopotam.us to suggest a matching city and state. No other personal data is shared.
These two lookups are functional conveniences only — neither provider receives your document contents or account details, and no other third-party services receive your personal data.
8. Children's privacy
This service is not directed at children under 13. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above. Continued use of the service after changes constitutes acceptance.
10. Contact
For privacy inquiries or to exercise your rights, email us at contactme@bosgenerator.com or open an issue at the project repository.
