Document of record § Privacy notice

Privacy notice.
In plain language.

How PerfectPaper, Inc. collects, uses, and protects your information when you use our Services. The short version: your manuscripts are yours, we never train models on them, and you can delete them at any time.

Version
v1.0
Effective
May 30, 2026
Jurisdiction
Global · GDPR · CCPA
Reading
≈ 8 min
§01
0
Drafts used to train models
§02
AES-256
Encryption at rest
§03
Anytime
Delete your data on request
§04
GDPR · CCPA
Rights honored
§01

Your work and model training

The content you upload is confidential. PerfectPaper does not train any large language model on your manuscripts, and our AI service providers are contractually prohibited from doing so. We do not sell or share your content with third parties except the providers we need to deliver the Services to you.

When you delete a review session from your history, we permanently delete its content. We may use de-identified signals about how you act on comments — for example, which feedback you address or dismiss — to improve ranking and quality. You can opt out of that use by emailing [email protected] from your account address.

§02

What we collect

We collect information you give us and information collected automatically when you use the Services:

Category Examples Why we have it
Account information Name, email address, password To create and secure your account
Your Content Manuscripts and documents you upload, and the feedback we generate To provide and return reviews
Billing data Payment-method details, processed by our payment provider To take payment for paid reviews
Usage and device data IP address, browser and device type, pages and actions, log data To keep the Services secure and to improve them
Pricing and fraud-prevention data The country indicated by your network and your payment method, and risk signals derived from your IP address (we store the country and the derived signals — not the IP itself) To offer region-adjusted pricing and to detect and prevent pricing abuse (legitimate interest). Flagged transactions are reviewed by a person and are never automatically denied

We do not seek to collect sensitive personal information.

§03

How we use your information

We process your information to:

  • create and authenticate your account and deliver reviews;
  • process the manuscripts you upload in order to generate feedback;
  • take payment, manage credits and subscriptions, and prevent fraud;
  • respond to your questions and provide support;
  • understand usage so we can improve the Services;
  • send service messages, and — where you've opted in — marketing you can leave anytime.
§05

When and with whom we share

We share information with vendors who process it on our behalf and under confidentiality and data-protection obligations, by category:

Purpose Type of provider
Cloud hosting and storage Infrastructure provider (data encrypted at rest)
AI-generated feedback Enterprise AI model providers, contractually barred from training on your content
Payments PCI-compliant payment processor
Email and support Transactional email and customer-support providers

We may also share information to comply with law, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you.

§06

AI service providers

We provide AI-powered reviews through enterprise AI service providers. Your manuscript text is sent to these providers only to generate your feedback, under agreements that prohibit them from using it to train their models and require them to protect it. You must not use the AI features in ways that violate a provider's policies.

§07

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand usage. You can control cookies through your browser. Where required, we ask for your consent to non-essential cookies.

We use your approximate country, derived from your IP address via Cloudflare, to show regional pricing that reflects local cost of living. We retain coarse pricing-decision records — country only, never your full IP — for up to 180 days to detect and prevent pricing fraud. This processing rests on our legitimate interest in offering fair, sustainable pricing and is never used to make an automated decision about you under Art. 22 GDPR.

§08

International transfers

We operate from the United States, and your information may be processed there and in other countries where we or our providers operate. Where we transfer personal information out of the EEA or UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

§09

How long we keep information

We keep your information for as long as your account is active or as needed to provide the Services. When you delete a review session, we permanently delete its content. When we no longer need information, we delete or anonymize it, except where we must retain it to meet legal obligations or it persists briefly in secure backups before aging out.

§10

How we keep it safe

We use technical and organizational measures designed to protect your information, including encryption in transit and at rest and access controls. No system is perfectly secure, but we work hard to protect your data and to respond quickly if something goes wrong.

§11

Children

The Services are not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact [email protected] and we will delete it.

§12

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in your account, or by contacting us. We will respond as required by applicable law, and we will not discriminate against you for exercising your rights.

§13

US state privacy rights

If you are a resident of a US state with a comprehensive privacy law — such as California, Colorado, Connecticut, Texas, Virginia, and others — you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of any "sale" or "sharing" for targeted advertising. PerfectPaper does not sell your personal information. To make a request, contact [email protected]; we will verify your identity before acting.

§14

Changes to this notice

We will update this notice as our practices or the law change. When changes are material, we will post the updated notice with a new effective date and, where appropriate, notify you directly.

§15

Contact us

Questions about your privacy, or want to exercise a right? Email [email protected], or write to PerfectPaper, Inc., Privacy Department, Delaware, USA. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.