Privacy Policy

This Privacy Policy explains how Papier ("Papier", "we", "us") handles personal data when you visit usepapier.io, use the Papier workspace, API, SDK, and CLI (together, the "Service"), or contact us. Questions can be sent to support@usepapier.io.

1. Our role

For account, billing, security, and website data, Papier is the controller. For content you and your team load into the Service, such as templates, recipient addresses, template data, and message logs, Papier acts as a processor (or service provider) on behalf of your organization, which is the controller. Your organization decides what recipient data it sends through Papier and is responsible for having a lawful basis, providing notices, and honoring requests from its own recipients.

2. Data we collect

Account and organization data

Name, email address, authentication credentials (passwords are stored hashed), sign-in method, organization and project membership, roles, and API keys (stored so they can be verified, not shown again in full).

Customer content

Email templates, schemas, translations, assets you upload, provider configuration, and the data you pass to render or send messages, including recipient email addresses and personalization values. Delivery logs, test sends, and virtual inbox messages are retained so you can inspect them.

Provider credentials

If you connect an email delivery provider such as Resend or SendGrid, we store the credentials you provide so the Service can use that provider on your behalf. Treat these as sensitive and use scoped keys.

Billing data

Subscription status, plan, and billing contact details. Payment card details are collected and held by our payment processor, not by Papier.

Usage and technical data

IP address, device and browser type, pages and features used, request logs, error reports, and timestamps. We use this to operate, secure, and improve the Service.

Communications

Messages you send to support and service notifications we send you.

3. How we use data

• Provide, maintain, and secure the Service, including rendering and sending messages you request.
• Authenticate users and enforce organization access controls.
• Process payments and manage subscriptions.
• Detect, investigate, and prevent abuse, spam, and fraud. This includes automated screening of content and sending activity.
• Diagnose errors, measure product usage, and improve features.
• Provide AI-assisted features you invoke, such as translation, by sending the relevant content to the configured model provider.
• Respond to support requests and send service and security notices.
• Comply with legal obligations and enforce our terms.

Where GDPR or similar law applies, our bases are performance of a contract, our legitimate interests (security, abuse prevention, product improvement), consent where we ask for it, and legal obligation.

We do not sell personal data. We do not use customer content or recipient data to train generative AI models, and we do not permit our AI providers to do so with data we send them where their terms allow us to prevent it.

4. Service providers

We share data with vendors that process it on our behalf, only as needed to provide the Service:

Delivery providers you connect receive message content and recipient addresses under your own agreement with them. We may also disclose data to professional advisers, in connection with a merger or sale of assets, to comply with law or valid legal process, or to protect the rights, safety, and security of Papier, our users, or others.

5. International transfers

We and our providers may process data in countries other than your own. Where required, we rely on safeguards such as Standard Contractual Clauses or an adequacy decision for transfers out of the EEA, UK, or Switzerland.

6. Retention

We keep account data while your account is active. Customer content and logs are kept until you delete them or your organization is closed, then removed from active systems within a reasonable period, and from backups as they rotate. We may retain limited data longer where needed for legal, tax, security, or dispute purposes. Security and abuse records may be kept as long as needed to prevent repeat abuse.

7. Cookies and similar technologies

The marketing site uses only essential resources such as fonts. The workspace uses cookies and local storage to keep you signed in and secure, and analytics and error-monitoring tools to understand usage and diagnose problems. Where law requires consent for non-essential analytics, we ask for it. You can block or clear cookies in your browser, though sign-in will not work without essential ones.

8. Security

We use access controls, tenant isolation between organizations, encryption in transit, and hashed credentials, and we limit staff access to what is needed. No system is perfectly secure. If a breach affecting your data occurs, we will notify affected customers and authorities as the law requires.

9. Your rights

Depending on where you live (including the EEA, UK, and California), you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to processing, to withdraw consent, and to complain to a data protection authority. We will not discriminate against you for exercising these rights. Email support@usepapier.io to make a request; we may need to verify your identity. If your data was submitted to Papier by one of our customers, we may direct you to that customer or act on their instruction.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided data to us, contact us and we will delete it.

11. Email recipients

If you received a message sent through Papier by one of our customers, that customer is responsible for it. Use the unsubscribe link in the message or contact the sender. You may also contact us at support@usepapier.io to report abuse.

12. Changes

We may update this policy. For material changes we will give notice, for example by email or in the workspace, before they take effect. The date above shows the latest revision.

13. Contact

Papier, support@usepapier.io. See also our Terms of Service.