Privacy Policy

1Information we collect

• Account information — your email address and the credentials you use to sign in.
• Your Mailbox activity — the offers you save, and preferences you set, including what you tell us you’re shopping for. You provide this, and you can edit or delete it.
• Consent records — a durable, time-stamped record of the permissions you grant or withdraw (for example, marketing email on or off), so your choices are honored and provable.
• Activity and device data — basic technical information needed to run and secure the Service, such as which offers were shown or clicked, and signals used to prevent fraud and abuse.

We do not ask for or need sensitive information to use Paaper.

2How we use your information

• To provide the Service — your account, your Mailbox, and the offers you choose to save or act on.
• To send you service messages (confirming your email, security and account notices).
• To send Paaper marketing email only if that permission is on (see §4).
• To measure how offers perform in aggregate, and to keep the Service secure and free of fraud and abuse.

We do not sell your personal information, and we do not share your identity with Advertisers.

3What Advertisers and partners can — and can’t — see

This is the heart of Paaper. Advertisers, Hosts, and Publishers receive aggregate totals only — counts like how many people saved or acted on an offer — never an individual person, name, email, or row. When you choose to visit an Advertiser from Paaper, we pass along an opaque referral tag so the action can be credited correctly; that tag contains no personal information about you. If you then decide to sign up or buy from that Advertiser on their own site, you share your information with them directly, under their privacy policy — not through Paaper.

4Your permissions, kept separate

Having a Paaper account lets us send you essential service messages. Everything else is a separate permission you control, tracked per purpose and per channel (email, in-app, push):

• Paaper marketing email. For U.S. members, this is on by default when you create an account, shown as a pre-checked preference you can uncheck at signup or switch off anytime in your Mailbox.
• Advertiser communications. Only when you knowingly opt in to a specific Advertiser.
• Paaper Drops, push, and AI-assisted matching. Each has its own permission if and when offered.

These are independent. Unsubscribing from Paaper marketing email does not close your account, empty your Mailbox, stop essential service messages, or cancel any other permission — and turning one off never turns another on. Every change is recorded so your current choices are always clear.

5Service providers we rely on

We use trusted companies to run Paaper, and share only what each needs to do its job:

• Supabase — secure database and account authentication.
• Vercel — hosting the website and apps.
• Resend — sending service and confirmation emails.
• Beehiiv — delivering Paaper marketing email, for members who’ve opted in.
• Cloudflare Turnstile — protecting sign-up from bots and abuse.

These providers act on our instructions and are not permitted to use your information for their own purposes.

6Your rights and choices

• Access and correct — view and update your account and Mailbox information.
• Delete — remove saved offers and shopping preferences yourself, or ask us to delete your account and associated personal data.
• Withdraw consent — turn any permission off at any time; unsubscribe links are also in every marketing email.

To make a request, email privacy@paaper.ai. We honor the rights available to you under applicable U.S. state privacy laws, and we won’t discriminate against you for exercising them.

7Keeping and protecting your information

We keep your information for as long as you have an account and as needed to provide the Service, meet legal obligations, and resolve disputes. Because consent must be provable, the record of your permission choices is kept as a durable history even as you change settings. We protect your information with measures including encryption in transit, strict access controls, and database-level isolation so each person’s Mailbox is walled off from everyone else’s. No system is perfectly secure, but we take these safeguards seriously.

8Children

Paaper is for adults 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18. If you believe a child has provided us information, contact privacy@paaper.ai and we will delete it.

9Changes and contact

We may update this policy as Paaper grows; if changes are material, we’ll take reasonable steps to let you know. Questions or requests? Email privacy@paaper.ai.