LEGAL & COMPLIANCE

Privacy Policy

Last Updated: August 15, 2026 • Effective Immediately

QUICK LINKS:1. Merchant of Record (Paddle)•2. Data Collection•3. Data Security Standards•4. GDPR & CCPA Rights

1. Merchant of Record & Reseller Statement (Paddle.com)

Our order process and payment transactions are conducted by our online reseller and Merchant of Record, Paddle.com Market Ltd ("Paddle"). Paddle is the Merchant of Record for all PaperTrack subscription orders and billing operations.

💳 Paddle Payment Handling & Customer Service:

Paddle handles all customer service inquiries, payment card processing, sales tax / VAT invoicing, and refund requests for PaperTrack subscriptions. When you purchase a Growth or Enterprise subscription, you provide payment details directly to Paddle, governed by Paddle's Privacy Policy ↗.

2. Information We Collect

PaperTrack collects information necessary to provide page-by-page document analytics, watermark rendering, access control, and NDA gate enforcement.

  • ✓
    Account & Sender Data: Email address, workspace name, custom domain configurations, and account preferences.
  • ✓
    Document Viewing Telemetry: Page dwell duration, timestamped view sessions, scroll hotspots, geographic location (country/city level), browser User-Agent, and IP address (for dynamic watermark imprinting).
  • ✓
    NDA Audit Logs: Click-through agreement acceptances, timestamped legal signatures, and email verification OTP codes.
ENCRYPTION & STORAGE SLAAES-256 & TLS 1.3

3. Data Security & Encryption Standards

PaperTrack enforces strict security and isolation practices across all document workflows:

  • ●Encryption at Rest: All stored documents and customer data are encrypted using industry standard AES-256 encryption.
  • ●Encryption in Transit: All data transmitted between clients and our platform is encrypted via TLS 1.3.
  • ●Instant Revocation: Senders maintain absolute control with one-click instant link kill switches and password updates.

4. Your GDPR & CCPA Privacy Rights

Under the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you maintain full sovereignty over your personal data:

Right to Access & Export:

Download complete document engagement logs and CSV audit exports anytime.

Right to Erasure (Forget):

Request complete deletion of your account and tracked documents by contacting us.

5. Related Compliance Documentation

Review our complete legal framework across these dedicated policy documents:

Terms of Service →Cookie Policy →Consent Preferences →Document Security Specs →