Privacy Policy

Last updated: 1 September 2026

This policy describes exactly what we store, why, and for how long. It is written to match what the system actually does.

What we collect

Account data

Your email address, a hash of your password (argon2id — we never store the password itself), and the name you give your organization. Needed to give you an account and to contact you about the service.

Document content

The HTML or URL you send, and the PDF we produce. Documents are stored in a private bucket, reachable only through a signed link, and are deleted automatically after 7 days. We do not read them, sell them, or use them to train models.

Usage records

Per document, we keep: size, page count, render time, status, and which API key made the request. This is what powers your usage dashboard and your monthly quota.

Security log

We record account events — sign-ups, logins, failed logins, API key creation and revocation, plan changes, blocked requests — with the IP address and browser user agent. This exists so that we can answer “was my account accessed by someone else?” with facts. Passwords and full API keys are never written to this log.

Payment data

Handled entirely by Stripe. We store only your Stripe customer id, your plan, and your subscription status. Card numbers never reach our servers.

What we do not do

• No advertising trackers, no analytics pixels, no ad networks.
• No selling or sharing of your data with data brokers.
• No training of machine learning models on your documents.
• No reading of your document contents by staff, except when you explicitly ask us to investigate a specific failure.

Who we share with

Only the processors that make the service run:

• Stripe — payment processing and subscription management.
• Our hosting and storage providers — running the servers and holding generated documents.
• Our email provider — sending transactional email such as password resets and billing notices.

We may also disclose data if legally required to, and will tell you unless we are prohibited from doing so.

How long we keep things

• Generated documents: 7 days, then permanently deleted.
• Usage records: retained while your account is active, for billing history.
• Security log: 12 months.
• Account data: until you delete your account.

Your rights

You can request a copy of your data, correction of it, or full deletion of your account and everything attached to it. Email litzawp@gmail.com and we will act within 30 days. Deleting your account removes your organization, users, API keys, templates, documents and usage records.

Cookies

We use two, both strictly necessary — no tracking cookies at all:

• papyra_session — keeps you logged in. HTTP-only, so JavaScript cannot read it.
• papyra_csrf — protects forms against cross-site request forgery.

Security

Passwords are hashed with argon2id. API keys are stored only as salted hashes and shown to you exactly once. Traffic is encrypted with TLS. Documents are rendered in isolated containers that have no access to our database. Downloads require a signed, expiring link.

Contact

Privacy questions or requests: litzawp@gmail.com