Paper Tray – Privacy Policy

1. Information We Collect

We collect the following categories of information:

a. Account Information

Name, email address, organization name, and billing details you provide when signing up.

b. Usage Data

Log data such as IP address, browser type, operating system, activity within the Service (e.g., searches, filters applied), approximate location information such as country and city, and timestamps such as login times or 'last seen' times.

c. Google Workspace Data

When you connect Paper Tray to Google Workspace, we access limited data via Google APIs, including:

• Document IDs, metadata, and text content from Google Docs, Sheets, and other files you authorize.
• Drive metadata (e.g., file titles, owners, timestamps).

We do not permanently store your documents. Instead, we store:

• Document IDs and metadata, including file names.
• AI-generated tags and organizational structures.
• Embeddings or summaries needed to provide features such as search.

2. How We Use Your Information

We use the collected data to:

• Provide, improve, and personalize the Service.
• Organize your Google Docs and related files with AI-generated tags and filters.
• Enable search, semantic search, and natural language queries.
• Process billing and manage subscriptions.
• Communicate important updates, security alerts, or support messages.
• Ensure security, prevent fraud, and comply with legal obligations.

We never sell your data.

3. Google API Data Compliance

Paper Tray's use of information from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We only access the minimum data required to deliver the Service.
• Your content is never read by humans, used for advertising, or shared with third parties without your consent.

4. Data Sharing & Disclosure

We may share information only in the following cases:

Service Providers

Trusted third parties (e.g., cloud hosting, payment processors) who assist in delivering the Service.

Legal Requirements

When required by law, regulation, or valid legal request.

Business Transfers

If Paper Tray is acquired or merged, your data may be transferred to the new entity, with notice provided.

5. Data Retention

• We retain your account and subscription data for as long as your account is active.
• Metadata, tags, and embeddings are retained only while necessary to provide the Service.
• If you delete your account, we delete associated data within [7 days], except where legally required to retain it.

6. Security

• We use industry-standard encryption (HTTPS/TLS) for data in transit and encryption at rest for stored data.
• Access to data is restricted to authorized personnel only.
• Despite safeguards, no system is 100% secure; you use the Service at your own risk.

7. Your Rights

Depending on your location (e.g., under GDPR/UK GDPR), you may have rights to:

• Access, correct, or delete your personal data.
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time (without affecting lawful processing prior to withdrawal).

To exercise rights, contact us at support@papertray.ai.

8. International Data Transfers

If you are located outside the UK/EU, your data may be transferred to and processed in countries where data protection laws differ. We use safeguards such as Standard Contractual Clauses to protect transferred data.

9. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal data from minors. If we learn we have collected such data, we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will notify you via email or in-app notice. Continued use of the Service means you accept the updated Policy.

11. Contact Us

For questions about this Privacy Policy, please contact us:

"Paper Tray" is a trading name of Vermilion Technologies Ltd, a company registered in England & Wales (No. 14744024).