Privacy Policy

Last updated: July 2025

1. Data Controller

The provider of this app and the data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Papeer
Halfmeyer Technologies UG (haftungsbeschränkt)
Obentrautstr. 27, 10963 Berlin, Germany

2. General Information on Data Processing

We take the protection of your personal data very seriously. We process your data exclusively on the basis of applicable legal provisions (in particular GDPR, BDSG, TMG, TTDSG).

• Collection, storage, and processing only occur to the extent necessary for using the app.
• We do not share your data with third parties without explicit consent, unless legally required.
• We implement appropriate technical and organizational measures to ensure an adequate level of protection.

3. Data Collected and Purposes

When using the app, we process the following data:

• Account Information: Name, email address, authentication data
• Documents & Content: Uploaded or scanned documents, metadata, OCR text, tasks, and notes
• Usage Data: App interactions, feature usage, log data
• Device Information: Device ID, operating system, app version
• Push Notifications: Only with explicit consent
• Analytics Data: Anonymized usage analysis for app improvement

Processing Purposes: Operating and improving the app, providing features, security, error diagnosis, communication, and (with consent) notifications.

4. Legal Bases for Processing

• Art. 6(1)(b) GDPR: Processing for contract fulfillment or pre-contractual measures (app usage)
• Art. 6(1)(a) GDPR: Processing based on your consent (e.g., for push notifications, analytics, cloud synchronization)
• Art. 6(1)(f) GDPR: Processing based on legitimate interests (app security, abuse prevention, service improvement)

5. Data Sharing

Your data is generally not shared with third parties. Exceptions:

• Necessary transmission to service providers (e.g., hosting, cloud providers like Google Firebase, OpenAI, Google Drive, Apple iCloud), with whom we have concluded data processing agreements (DPA).
• Legal obligations (e.g., to authorities under mandatory legal provisions)
• In case of business transfer, only after prior notice and safeguarding of data protection rights

Compliance with Google API Services Limited Use Requirements:
Papeer accesses Gmail data (if connected) strictly for user-requested features such as scanning, processing, summarizing, and task extraction from mail and documents. We fully comply with Google’s Limited Use requirements:

• We do not use or transfer data for advertising purposes.
• We only use the data to provide or improve user-facing features clearly shown within the app.
• We do not allow human access to the data except with user consent, for security purposes, or to comply with the law.
• We do not share the data except as necessary to operate the core features.

6. Data Transfer to Third Countries

Some services are hosted outside the EU (e.g., USA). We ensure appropriate safeguards according to Art. 44 ff. GDPR, particularly through EU Standard Contractual Clauses (SCC).

7. Storage and Deletion

• Data is only stored as long as necessary for the purposes or legal retention periods exist.
• You can view, correct, or delete your data at any time. Contact us at support@papeer.ai.

8. Data Subject Rights

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure ("Right to be forgotten", Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent with future effect (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority

9. Data Security

We use technical and organizational security measures (e.g., encryption, access restrictions, two-factor authentication) to protect your data from loss, misuse, and unauthorized access. However, no internet transmission is completely secure. We assume no liability for data transmissions outside our sphere of influence.

10. Protection of Minors

Our app is not intended for children under 16 years of age. We do not knowingly collect data from children under 16.

11. Changes to this Privacy Policy

We reserve the right to modify this privacy policy at any time. The current version is always available in the app and at https://papeer.ai/privacy.html. You will be notified in the app of any significant changes.

12. Privacy Contact

For privacy inquiries or to exercise your rights, contact:
support@papeer.ai

---

This privacy policy was created to the best of our knowledge and serves to fulfill legal information obligations.
Only German laws apply. Changes and errors reserved. No liability for external links.