PaperPaid ("PaperPaid", "we", "us") provides software that helps businesses manage customers and send them estimates, contracts and invoices. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website and app at paperpaid.com and to the document pages and emails we deliver.
We deal with two groups of people:
- Account holders: businesses and their team members who sign up and use PaperPaid.
- Customers of those businesses: people who receive an estimate, contract or invoice through PaperPaid. The business that sent the document decides what information about you is entered and why. For that information we act on the business's behalf as a service provider, and the business is responsible for it. If you have questions about how a business uses your information, please contact that business first.
Information we collect
From account holders
- Account details: email address and password (stored only as a secure hash by our authentication provider).
- Business profile: business name, owner name, address, phone, email, license number, logo, default terms, and the payment instructions you choose to show on invoices.
- Records you create: customers (names, company, email, phone, addresses, preferred language, notes), estimates, contracts, invoices, line items, and payments you record.
From people who receive documents
- When you open a document link, the time it was first viewed.
- When you approve an estimate or sign or decline a contract: the name you type, your signature (typed or drawn), the date and time, your IP address and your browser's user-agent string. For signed contracts we also store a copy of the contract as signed and a cryptographic fingerprint of it. This creates the record that the signature is genuine and the document hasn't changed.
Automatically
- If you have an account, your browser stores a session token so you stay signed in. We don't use advertising cookies or third-party analytics.
- Our hosting and database providers keep standard server logs (such as IP address, time and the page requested) for security and troubleshooting. If the app hits an error, technical details about the error may be sent to our hosting provider so it can be fixed.
How we use information
- To provide PaperPaid: storing your records, generating documents and PDFs, and showing them to the people you send them to.
- To send email for account holders: documents, signed copies, payment reminders (which a business can turn off), and notifications to the business when a customer approves, signs or declines.
- To keep a reliable record of approvals and signatures, and to prevent fraud, abuse and spam.
- To provide support, maintain and improve the service, and meet legal obligations.
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use the information businesses enter about their customers for our own marketing.
Who we share information with
We use service providers that process information on our behalf, only to run PaperPaid:
- Supabase: database, authentication and file storage.
- Lovable and Cloudflare: app hosting and infrastructure.
- Resend: email delivery.
- Google Fonts: the app loads fonts from Google, which receives your IP address when fonts are downloaded.
- GitHub: runs our daily reminder schedule (it does not receive customer or document data).
Documents are also shared with the people a business chooses to send them to, and anyone who has a document's link can view it. Links are long and random, but please don't forward them to people who shouldn't see the document. We may also disclose information if required by law, to protect the rights and safety of PaperPaid, our users or others, or as part of a merger, acquisition or sale of assets (in which case this policy will continue to apply).
How long we keep information
We keep account information and records for as long as the account is active. Businesses can edit or delete most records in the app. Signed contracts are locked and cannot be changed or deleted in the app, because they are legal records. If an account is closed, we delete or de-identify its information within a reasonable time, except where we need to keep it to meet legal obligations, resolve disputes or enforce our agreements. Backups are overwritten on a rolling basis.
Security
Information is encrypted in transit (HTTPS). Each business's records are isolated at the database level so other businesses can't see them, and document links use long random codes that can be cancelled by issuing a new link. No system is perfectly secure, so please use a strong password and contact us right away at support@paperpaid.com if you suspect a problem.
Your choices and rights
Account holders can view, update and delete most of their information in the app, and can ask us at support@paperpaid.com for a copy of their data or to close their account. If you received a document from a business, please contact that business to access, correct or delete your information. We'll help them respond. Businesses can turn off automatic payment reminders in Settings.
California privacy rights
If you live in California, the California Consumer Privacy Act (as amended) gives you the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- ask us to correct or delete it;
- opt out of the sale or sharing of personal information (we don't sell or share it);
- limit the use of sensitive personal information (we only use it as needed to provide the service); and
- not be treated differently for using these rights.
In the past 12 months we have collected the categories of information described above: identifiers (such as name, email, IP address), customer records (such as address and phone), commercial information (estimates, contracts, invoices and payments), internet activity (such as when a document was viewed and server logs), and signatures. We collect them from you, from the businesses that use PaperPaid, and automatically, for the purposes described in this policy, and disclose them only to the service providers listed above.
To make a request, email support@paperpaid.com. We'll verify your request by confirming it from the email address on the account or record, and may ask for more information. You can use an authorized agent, who must show us your signed permission. If your information was entered by a business that uses PaperPaid, we'll forward your request to that business, because it controls that information.
Children
PaperPaid is a business tool and isn't meant for anyone under 18. We don't knowingly collect information from children.
Changes to this policy
We may update this policy. We'll post the new version here with a new effective date, and if the changes are significant we'll tell account holders by email or in the app before they take effect.
Contact us
Email support@paperpaid.com with any questions or requests about privacy. See also our Terms of Service.