Privacy Policy

We are pleased you are visiting our website https://paperbuddy.ai and are interested in our company and our services. Despite careful content control, we do not assume liability for external links to third-party content, as we did not initiate the transmission of this information, nor have we selected or altered the recipients of the transmitted information and the information itself.

Protecting your personal data during the collection, processing, and use of it during your visit to our website is a significant concern for us and is carried out within the framework of legal regulations, about which you can inform yourself at www.bfd.bund.de.

Below, we explain what information we collect during your visit to our website and how it is used:

1. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

Each time a customer (or other visitor) accesses our website, the internet browser used on your device (computer, laptop, tablet, smartphone, etc.) automatically sends information to our website’s server. This information is temporarily stored in a so-called logfile.

The following data is collected without your intervention and stored until it is automatically deleted:

  • IP address of the requesting computer, as well as device ID or individual device identifier and device type,
  • Name of the retrieved file and the amount of data transferred, as well as the date and time of retrieval,
  • Report about successful retrieval,
  • Requesting domain,
  • Description of the type of internet browser used and possibly the operating system of your device and the name of your access provider,
  • Your browser history data and your standard weblog information,
  • Location data, including location data from your mobile device. Please note that you can control or disable the use of location services in most mobile devices through the settings menu of the mobile device. Our legitimate interest according to Art. 6 Para. 1 S. 1 lit. f GDPR for collecting the data is based on the following purposes: Ensuring a smooth connection setup and comfortable use of the website, evaluating system security and stability, and for further administrative purposes.

b) When using our contact form and newsletter

For any questions or to receive updates about product launches and improvements, we offer you the opportunity to contact us using a form provided on the website or to subscribe to our newsletter. It is necessary to provide at least your email address so we know from whom the inquiry comes and to be able to respond or send updates. Further information can be provided voluntarily. The processing of data for the purpose of contacting us or sending newsletters takes place according to Art. 6 Para. 1 S. 1 lit. a GDPR based on your voluntarily granted consent. The personal data collected for these purposes will be automatically deleted after your inquiry has been addressed or when you unsubscribe from the newsletter.

c) Account registration and use of Paperbuddy

When registering an account via E-Mail and Password or through Third-Party Login via Github, we collect the following data:

  • Email, First Name, Last Name, and other relevant data required by the login method chosen. This data is essential for creating and managing your account, providing personalized assistance, and ensuring secure access to our services. The processing of this data is based on Art. 6 Para. 1 lit. b GDPR for contract fulfillment purposes and Art. 6 Para. 1 lit. a GDPR for data processed through third-party providers, with whom we ensure data protection agreements are in place.

d) Interaction with AI and data usage

Paperbuddy offers AI-powered services where users can upload PDF documents, take notes, and chat with documents. All text inputs and interactions are processed via the OpenAI API. The collected data, such as document content and notes, are used to provide responses, grammar assistance, text improvements, and to continue writing based on the input provided. We ensure that all interactions comply with OpenAI’s API Terms and Conditions, which can be viewed at https://openai.com/policies/business-terms. The processing and storage of these interactions are necessary for the performance of our contract with you and are based on Art. 6 Para. 1 lit. b GDPR. Data used for improving Paperbuddy’s functionalities is based on our legitimate interests under Art. 6 Para. 1 lit. f GDPR to enhance user experience.

e) Use of payment service providers

To handle payments for our services, we use Stripe as our payment service provider. Necessary payment data such as credit card information and billing details are securely transferred to Stripe for transaction processing. The transfer of this data is essential for payment processing and is carried out under Art. 6 Para. 1 lit. b GDPR. We do not store credit card or sensitive payment data on our servers.

2. Disclosure of personal data

Your data is not transferred to third parties for purposes other than those listed below.

We only pass on your data to third parties if:

  • You have given your express consent according to (Art. 6 Para. 1 S. 1 lit. a GDPR),
  • This is necessary for the processing of contractual relationships with you (Art. 6 Para. 1 lit. b GDPR),
  • There is a legal obligation to pass on the data (Art. 6 Para. 1 lit. c GDPR),
  • The transfer is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data (Art. 6 Para. 1 S. 1 lit. f GDPR).

In these cases, the scope of the transmitted data is limited to the necessary minimum.

Our privacy policy is in compliance with the applicable data protection regulations, and the data is only processed in the Federal Republic of Germany / European Union. A transfer to third countries does not take place and is not intended.

3. Rights of the affected

Upon request, we will gladly inform you whether and what personal data about you is stored (Art. 15 GDPR), especially about the processing purposes, the category of personal data, the categories of recipients to whom your data was disclosed or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, limitation of processing or objection, the existence of a right to complain, the origin of your data if it was not collected by us, and about the existence of automated decision-making including profiling.

You also have the right to have incorrectly collected personal data corrected or incompletely collected data completed (Art. 16 GDPR).

Furthermore, you have the right to request that we restrict the processing of your data if the legal requirements for this are met (Art. 18 GDPR).

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request the transmission to another controller (Art. 20 GDPR).

In addition, you have the so-called “right to be forgotten,” i.e., you can request the deletion of your personal data by us if the legal requirements are met (Art. 17 GDPR).

Irrespective of this, your personal data will be automatically deleted by us if the purpose of the data collection no longer applies or the data processing has been unlawful.

According to Art. 7 Para. 3 GDPR, you have the right to revoke your once given consent at any time with us. This means that we may no longer continue the data processing based on this consent for the future.

You also have the right to object at any time to the processing of your personal data if a right of objection is provided by law. In the case of an effective revocation, your personal data will also be automatically deleted by us (Art. 21 GDPR).

If you wish to make use of your right of revocation or objection, an email to: [email protected] is sufficient.

In the event of violations of the data protection provisions, you have the option, according to Art. 77 GDPR, to lodge a complaint with a supervisory authority.

4. Duration of data storage

The collected data will be stored by us as long as it is necessary for the performance of the contracts entered into with us or until you have exercised your right to deletion or your right to data transfer to another company.

5. Cookies

We use cookies on our website. These are small text files that your browser automatically creates and that are stored on your device when you visit our website. The cookie stores information that arises in connection with the specifically used end device. However, this does not mean that we immediately gain knowledge of your identity. These cookies are set as so-called First-Party Cookies (“own cookies”) or Third-Party Cookies (“third-party cookies”). First-Party Cookies are set by the website you are currently on and are not made accessible across domains by browsers. A Third-Party Cookie, on the other hand, is set by a third party, not by the actual website you are currently on. The cookies are also differentiated into technically necessary and technically unnecessary cookies. On our website, both technically necessary cookies and technically unnecessary cookies are set according to the following paragraphs.

Technically necessary cookies are essential for the operation of our website and enable certain functions to be made available to you. These technically necessary cookies, which are only needed and set for the individual necessary online session, are automatically deleted after leaving our website.

In providing our Internet offer, Java applets and JavaScript are used. If you do not want to use these aids or active content for security reasons, you should deactivate the corresponding setting of your browser.

6. Online Marketing / Analysis Tools

With the statistical recording through online marketing measures, we want to design our website to meet your needs and continuously adapt and optimize it for you, as our user. Unless otherwise stated below, the use of the online marketing and tracking measures we use is based on your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. Insofar as a transfer of your data to the USA takes place, this is based on your consent according to Art. 49 Para. 1 S. 1 lit. a GDPR. In addition, the service providers concerned have committed themselves to us within the framework of a standard contractual clause that a level of data protection is guaranteed in third countries outside the EU, into which data is exported, that corresponds to that of the EU.

Google Analytics

Provided you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited “Google”. The use includes the operating mode “Universal Analytics”; This allows data, sessions, and interactions across multiple devices to be assigned to a pseudonymous user ID, thus analyzing the activities of a user across devices. Google Analytics uses so-called “cookies”; text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a server of Google in the USA and stored there. In the event of the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. We point out that on this website, Google Analytics has been extended by IP anonymization to ensure the anonymous collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. More information about terms of use and privacy can be found at (https://www.google.com/analytics/terms/de.html or under https://policies.google.com/?hl=de). On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator.

The data sent by us and linked to cookies, user identifiers (e.g., user ID), or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

More information about terms of use and privacy of Google Analytics can be found at http://www.google.com/analytics/terms/de.html or at http://www.google.com/intl/de/analytics/privacyoverview.html.

You can prevent the installation and storage of cookies by setting your browser software accordingly; however, we point out that in this case, you may not be able to fully use all functions of this website.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available under the following link https://tools.google.com/dlpage/gaoptout?hl=de.

Alternatively to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the future collection of your data when visiting this website: Disable Google Analytics. The opt-out cookie applies only in this browser and only to our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Data Security

We strive to take all necessary technical and organizational security measures to store your personal data in such a way that they are neither accessible to third parties nor the public. If you wish to contact us by email, we would like to point out that the confidentiality of the information transmitted cannot be fully guaranteed on this communication channel. We therefore recommend that you send us confidential information exclusively by post.

Current status and changes to this privacy policy

This privacy policy is currently valid.

Due to the further development of our website and offers above or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be retrieved and printed at any time on the website at https://paperbuddy.ai/privacy.

Name and contact details of the controller

This privacy information applies to data processing by:

Paperbuddy.ai, Friedrichstraße 71, 63263 Neu-Isenburg, [email protected]