Privacy Policy

Effective date: November 1, 2026

This Privacy Policy explains how the operator of PapersToSheet (“PapersToSheet”, “we”) collects, uses and shares information when you use https://paperstosheet.com.

1. Information we collect

• Account information: your email address, a salted hash of your password (we never store the password itself), when you confirmed your email, and the sessions you're signed in on (IP address and browser).
• Documents you upload and the data extracted from them. If you're not signed in, documents are processed only to deliver the conversion and are not kept by us. If you're signed in, the original file and the extracted data are saved to your history so you can download them again; you can delete them anytime and they're deleted automatically after 90 days.
• Usage and device data for every request: date and time, IP address, approximate country (from our CDN), browser user agent, referring page, the page or endpoint requested, and for conversions the file name, file type, size, page count, AI model and processing cost.
• Cookies: a sign-in session cookie, a random visitor ID (to enforce the free daily allowance), and an admin session cookie for our staff. These are strictly necessary.
• Advertising: we show ads through Google AdSense. Google and its partners use cookies to serve ads based on your visits to this and other websites. You can opt out of personalized ads at Google Ads Settings or aboutads.info. See how Google uses data from partner sites.
• Purchase information: payments are handled by Polar, our merchant of record. We never receive your full card details. Polar shares with us your subscription status, plan and billing period, and may share your name, email and order details.

2. How we use information

• to provide the Service, run your account and history, apply free and paid usage limits, and support you;
• to send service emails: email confirmation, password resets and security notices;
• to send occasional product emails to account holders — for example, a single reminder if you viewed our plans while signed in but didn't subscribe. Every such email has a one-click unsubscribe link, and opting out doesn't affect service emails;
• to secure the Service: rate limiting, fraud and abuse prevention, and blocking abusive IP addresses;
• to measure and improve performance, accuracy and costs;
• to comply with legal obligations and enforce our Terms.

We do not use your documents to train AI models.

3. How we share information

We share information only with service providers acting on our behalf:

• fal.ai and the AI model providers it routes to (for example Google) — to read your documents;
• Polar — payments, tax and subscription management;
• Cloudflare — content delivery, DNS, security, and R2 storage of saved history files;
• our email provider — to deliver account emails;
• our hosting provider — to run our servers and database.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of the business. We do not sell or “share” personal information (as those terms are defined in California law), and we do not use it for targeted advertising.

4. Retention

• Uploads while signed out: kept by our AI processing provider only as long as needed to process them; not stored by us.
• History (signed-in uploads and extracted data): until you delete it, and at most 90 days.
• Account data: until you delete your account from the account page (which also deletes your history).
• Request logs (including IP addresses): deleted after 180 days.
• Usage counters: one row per visitor or account per day or billing period.
• Ban records: kept until removed.

5. Your rights

Depending on where you live (including California under the CCPA/CPRA, other US states with privacy laws, and the EU/UK under the GDPR), you may have the right to know what personal information we hold, access it, correct it, delete it, and opt out of sale, sharing or targeted advertising (which we don't do). To exercise a right, email [email protected]. We will verify your request, respond within the time the law requires, and not discriminate against you for exercising your rights. An authorized agent may submit a request on your behalf with proof of authorization.

For EU/UK users: we process data to perform our contract with you (providing the Service), for our legitimate interests (security, abuse prevention, improving the Service) and to comply with law. You may lodge a complaint with your local data protection authority.

6. International transfers

Your information may be processed in the United States and other countries where we or our providers operate, with appropriate safeguards where required.

7. Security

We use encryption in transit (HTTPS), access controls and minimal data retention. No method of transmission or storage is 100% secure.

8. Children

The Service is not directed to children under 13 (or under 16 in the EU), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

9. Do Not Track and Global Privacy Control

We do not track you across sites. Because we do not sell or share personal information, there is nothing to opt out of; we nonetheless honor Global Privacy Control signals as an opt-out request.

10. Changes

We may update this policy and will post changes here with a new effective date.

11. Contact

the operator of PapersToSheet — [email protected]