Legal

Privacy Policy

Your documents are yours. We collect only what we need and never share it.

Last updated: May 2026

What data we collect

We collect only what's necessary to run Paperwise:

  • •Account data — your email address and display name when you sign up.
  • •Documents — the files you upload. These are stored in your account and never shared.
  • •Queries — the questions you ask and the AI responses, stored as conversation history.
  • •Usage data — aggregate counts (documents uploaded, queries made) for enforcing tier limits.
  • •Authentication tokens — short-lived JWT cookies to keep you signed in.

We do not collect payment information (Pro billing will use Stripe, which handles card data on their servers).

How your data is stored

Documents are stored in Supabase Storage (S3-compatible object storage hosted in the US). Account data, conversations, and metadata are stored in a PostgreSQL database hosted on Supabase.

All data is encrypted at rest and in transit (TLS 1.2+). We use environment-level secrets for all storage credentials — no credentials are ever logged or exposed to clients.

How your data is used

Your data is used exclusively to power your own queries:

  • •Documents are chunked and embedded into a vector index so we can retrieve relevant passages when you ask a question.
  • •Conversation history is used to give the AI multi-turn context within your sessions.

Your data is never used to train AI models. Paperwise uses retrieval-augmented generation over your own documents. Your files are not sent to any AI provider for training.

We do not sell, rent, or share your data with third parties for advertising or analytics.

Data retention

Free accounts: conversation history is retained for 7 days after the last message. Documents remain until you delete them or your account.

Pro accounts: conversation history is retained indefinitely until you delete it.

Deleted documents are removed from storage within 24 hours. When you delete your account, all your data (documents, conversations, account info) is permanently deleted within 30 days.

Your rights

You have full control over your data:

  • •Access — view all your documents and conversation history in the dashboard.
  • •Delete — delete any document or conversation at any time. Delete your account (and all data) from Settings → Profile → Danger Zone.
  • •Export — contact us at hello@paperwise.ai to request an export of your data.
  • •Correction — update your name and email from Settings → Profile.

If you're in the EU, you also have rights under GDPR including the right to erasure and data portability. Contact us to exercise these rights.

Cookies

We use two HttpOnly cookies for authentication:

  • •paperwise_access_token — short-lived JWT (15 minutes) used to authenticate API requests.
  • •paperwise_refresh_token — longer-lived token (7 days) used to issue new access tokens without requiring you to log in again.

We do not use cookies for advertising or third-party tracking.

Contact

Questions about this policy? Email hello@paperwise.ai — we aim to respond within 2 business days.