Privacy Policy

Last updated: [DATE] — TEMPLATE: review and complete before launch (PDPA applies for Singapore-based operation).

Your documents

Files you process are handled entirely in server memory for the duration of your request and are never written to disk, object storage, or logs. We cannot retrieve a file after your download completes because no copy exists.

Account data

We store your email address, a salted password hash, optional profile details you provide (name, company, address, profession, avatar), and — if you enable two-factor authentication — a TOTP secret. This data is used solely to operate your account.

Logs

Operational logs record request metadata (tool used, timestamps, truncated identifiers) for security and reliability. Log entries never contain your documents or their contents.

Cookies

Papeloops uses a single strictly-necessary session cookie (pl_session) to keep you signed in. No advertising or cross-site tracking cookies are used.

Third parties

The service is hosted on Vercel infrastructure. We do not sell or share your personal data with advertisers.

Your rights

You may request deletion of your account and associated data at support@papeloops.com. [Complete with PDPA access/correction rights before launch.]