Legal

Privacy Policy

Last updated August 2026

1. Information We Collect

We collect account details (name, email), project details (financial parameters, transaction properties, ledger transactions), uploaded documents, and connection metadata. Payment cards and SSNs are routed to PCI-compliant subprocessors — not stored directly by PaperWorking.

2. How We Use Your Data

Your data is used solely to provide PaperWorking features: metrics calculations, document vault, vendor communications, and team collaboration. We never sell your data or share it for third-party marketing.

3. Data Storage & Transfers

Data is stored on Google Cloud Platform (us-central1) with TLS 1.3 in transit and AES-256 at rest. Firebase Firestore, Neon PostgreSQL, and Firebase Storage may each hold subsets of your account data.

4. GDPR & CCPA Rights

You may access, rectify, or export your data. Dashboard settings provide self-service export and account deletion requests subject to verification windows.

5. Account Deletion

Deletion requests include a 24-hour grace period. After confirmation, live project data and uploads are removed; audit logs may be retained up to 7 years where required.

6. Cookies

Essential session cookies (`__session`, `__acct`, `__sub`) are required for authentication. Analytics cookies are optional and disabled by default in the migration preview.

Questions? Contact us