Privacy Policy

Last updated: March 31, 2026

1. Information We Collect

When you use Papered, we collect the following information:

• Account information: Your name, email address, and password when you create an account, or profile information from Google if you sign in via OAuth.
• Stripe data: When you connect your Stripe account, we access transaction data, customer details, and payment information necessary to generate invoices. We connect via Stripe's OAuth flow and do not store your Stripe secret keys.
• Usage data: We collect information about how you interact with our service, including pages visited, features used, and invoices generated.
• Device information: Browser type, operating system, and IP address for security and analytics purposes.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Papered service, including generating and sending PDF invoices on your behalf.
• Sync and display your Stripe transaction data within the application.
• Send you transactional emails related to your account and invoices.
• Improve our service and develop new features.
• Detect and prevent fraud or abuse.

3. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Invoice delivery: When you send an invoice, the recipient receives the invoice PDF containing the transaction details you have chosen to include.
• Service providers: We use third-party services for hosting, email delivery, and analytics. These providers are bound by contractual obligations to protect your data.
• Legal requirements: We may disclose information if required by law or to protect our rights.

4. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest. Stripe account connections use OAuth tokens, and we never have access to your Stripe secret API keys.

5. Data Retention

We retain your account and invoice data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Disconnect your Stripe account at any time.
• Export your invoice data.

7. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through the application.

9. Contact

If you have questions about this privacy policy, please contact us at support@papered.app.