LEGAL & COMPLIANCE

Privacy Policy

Last Updated: August 15, 2026 • Effective Immediately

1. Merchant of Record & Reseller Statement (Paddle.com)

Our order process and payment transactions are conducted by our online reseller and Merchant of Record, Paddle.com Market Ltd ("Paddle"). Paddle is the Merchant of Record for all PaperTrack subscription orders and billing operations.

💳 Paddle Payment Handling & Customer Service:

Paddle handles all customer service inquiries, payment card processing, sales tax / VAT invoicing, and refund requests for PaperTrack subscriptions. When you purchase a Growth or Enterprise subscription, you provide payment details directly to Paddle, governed by Paddle's Privacy Policy ↗.

2. Information We Collect

PaperTrack collects information necessary to provide page-by-page document analytics, watermark rendering, access control, and NDA gate enforcement.

  • Account & Sender Data: Email address, workspace name, custom domain configurations, and account preferences.
  • Document Viewing Telemetry: Page dwell duration, timestamped view sessions, scroll hotspots, geographic location (country/city level), browser User-Agent, and IP address (for dynamic watermark imprinting).
  • NDA Audit Logs: Click-through agreement acceptances, timestamped legal signatures, and email verification OTP codes.
ZERO DATA RETENTION SLAAzure OpenAI Service

3. Opt-in AI Summaries & Confidentiality Guarantee

PaperTrack provides opt-in AI document intelligence (Executive Summaries and Key Risk Clause Audits). We operate under strict enterprise privacy parameters:

  • Explicit Opt-In Only: No document is sent to AI without your manual click on "Generate AI Summary".
  • Zero Model Training: Your confidential contracts and decks are never stored or used to train public models.
  • Azure Enterprise Isolation: Processed strictly within Azure OpenAI Service enterprise boundaries.

4. Your GDPR & CCPA Privacy Rights

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you maintain full sovereignty over your personal data:

Right to Access & Export:

Download complete document engagement logs and CSV audit exports anytime.

Right to Erasure (Forget):

Request complete deletion of your account and tracked documents by contacting us.

5. Related Compliance Documentation

Review our complete legal framework across these dedicated policy documents: