Privacy, without the fog

Privacy policy · draft v0.9, pre-launch, pending counsel review.

Effective with the founding cohort. The short version: your clients' documents are yours, we process them only to run the product, we sell nothing to anyone, and everything exports and deletes on your say-so.

What we collect

• Account data: your name, firm name, email, billing details (held by Stripe, not us).
• Client contact data you add: client names and email addresses — you warrant you're entitled to give us these for the purpose of document collection on your behalf.
• Documents: whatever your clients upload or forward. We treat every document as confidential financial information regardless of content.
• Usage data: logs needed to run and secure the service (timestamps, IPs, actions). No advertising trackers, no analytics that see document contents.

What we do with documents

Exactly three things: store them in your workspace, classify them (one automated pass at ingest, including via the AI subprocessor listed on the security page), and show them to your firm. We never use your documents to train models, never share them with third parties beyond the listed subprocessors, and never look at them ourselves without your written permission.

Your clients' rights

Your clients can ask you (or us directly) what we hold about them; we answer through you within 14 days. Deletion requests flow the same way. We act as your service provider/processor; you remain the controller of your clients' data.

Retention & deletion

Documents stay until you delete them or close your account. Account closure: everything exportable for 30 days, then hard-deleted within a further 30. Backups age out within 35 days of deletion.

Where & who

Processing in the United States. Operating entity, postal address, and DPO contact publish with the final version of this policy before the first paid subscription — a policy without an entity behind it is theater, so we're not pretending otherwise.

Draft published for scrutiny. hello@papersin.com for corrections — we'd rather fix the policy than defend it.