Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Name (first name, last name)
• Email address
• Password (stored as a secure hash)

Usage Data

We automatically collect:

• API requests made with your account
• URLs submitted for extraction
• Extraction success/failure rates
• IP address and request timestamps

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details on our servers.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Send important account notifications (quota warnings, security alerts)
• Improve Service reliability and performance
• Prevent abuse and comply with legal obligations

3. Data Security

We implement security measures to protect your data:

• API keys are encrypted at rest using AES-256-GCM
• Passwords are hashed using bcrypt
• All data is transmitted over HTTPS/TLS
• Database access is restricted and logged

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Extraction logs: Retained for 12 months
• Payment records: Retained as required by law (typically 7 years)

When you delete your account, we permanently delete your personal information within 30 days, except where required by law.

5. Your Rights (GDPR)

If you're located in the EU, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing of your data

To exercise these rights, email hello@papercut.md

6. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party analytics or advertising tracking on our website.

7. Data Sharing

We do not sell your personal data. We may share data only with:

• Stripe: For payment processing
• Service providers: Infrastructure services (e.g., hosting, email delivery)
• Legal authorities: When required by law

8. Extracted Content

URLs and extracted content are temporarily stored for processing and may be retained in extraction logs for service improvement. We do not claim ownership of content you extract through the Service.

9. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We take appropriate safeguards to protect your data in accordance with this Privacy Policy.

11. Changes to Privacy Policy

We may update this Privacy Policy at any time. We will notify users of significant changes via email. Continued use of the Service constitutes acceptance of the new policy.

12. Contact

Privacy questions or requests? Contact us at hello@papercut.md