1. Who is responsible
- Our website and customer accounts: we are the controller of account, billing, support and analytics data.
- Documents and widget conversations: our customers decide what they upload and where they put the widget. For that content we act as their processor under our Data Processing Addendum. If you asked a question in a widget on someone else's website, that organization's privacy notice applies and you can contact them directly.
2. What we collect
- Account data: name, email address, organization name and role, sign-in and session data (through Clerk), and your Terms acceptance (version and time).
- Billing data: plan, subscription status, invoices and billing contact details. Card details are collected and stored by our payment provider, Dodo Payments; we never see full card numbers.
- Customer Content: uploaded documents, the knowledge base built from them, and the questions and answers in the dashboard and widget.
- Widget visitors: the questions you type, the answers, and, only if you choose to send the conversation to the organization's support team, the email address and note you enter. Bot protection (Cloudflare Turnstile) and rate limiting use technical data such as your IP address.
- Usage and device data: pages viewed, features used, browser and device type, and IP address, collected through PostHog on our website and dashboard, and through Google Analytics on our public marketing website only. Analytics events carry metadata only; we never send question, answer or document text to analytics.
- Support: what you send us by email at support@paperlinkai.com.
3. How we use it
- to provide the Service: build your knowledge base, answer questions, run the dashboard (contract);
- to bill you and keep records required by tax and accounting law (contract, legal obligation);
- to send service emails such as billing notices, usage alerts and reports, which you can partly control in notification settings (contract, legitimate interests);
- to keep the Service secure, prevent abuse and fix errors (legitimate interests);
- to understand how the product is used and improve it, using metadata only (legitimate interests).
We do not sell personal data, do not use it for advertising, and do not use Customer Content to train AI models.
5. Where data is stored
Our infrastructure and most providers are in the United States. When data moves across borders we rely on appropriate safeguards, such as Standard Contractual Clauses, where the law requires them.
6. How long we keep it
- Customer Content and conversations: while the organization's account is active, until the customer deletes them, or until the organization is deleted. Deletion removes them from active systems promptly; backups expire within 30 days.
- Account data: while your account is active, then deleted or anonymized unless we must keep it.
- Billing records: as long as tax and accounting law requires.
- Analytics and error data: up to 24 months, then deleted or aggregated.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict some processing, and withdraw consent. Email support@paperlinkai.com; we answer within 30 days. If your data is in a customer's widget or documents, we will pass your request to that customer. You can also complain to your local data protection authority.
9. Security
Each organization's data lives in its own isolated store; data is encrypted in transit and at rest; access is limited to authenticated members of the organization and to the staff who need it to run the Service.
10. Children
Paperlink AI is a business service and is not directed to children under 16.
11. Changes
We will post changes on this page with a new version date and, for material changes, tell account holders by email or in the dashboard.
12. Contact
Intellidoc AI Private Limited, Kota, Rajasthan, India. Email: support@paperlinkai.com.