Skip to content

Data Protection Statement

What is the General Data Protection Regulation?

The GDPR is a European Union (EU) privacy law that has applied to businesses around the world since 25 May 2018. It regulates how any organization that is subject to the Regulation treats or uses the personal data of people located in the EU. Personal data is any piece of data that, used alone or with other data, could identify a person. If you collect, change, transmit, erase, or otherwise use or store the personal data of EU citizens, you'll need to comply with the GDPR.

The GDPR replaced an older directive on data privacy, Directive 95/46/EC.

What data does Papero store?

The Papero platform stores on the platform all the information that is displayed on the users account when logging into the platform and browsing to: https://papero.ai/account

We also store what you create and add in the Papero app: your documents and their versions, your sharing links, the comments on your documents and the comments you write, your display name, your sources and collections, your chat conversations, your usage records, the PDF files you upload to your library with the text extracted from them and the embeddings computed from that text, and the invoices that we create for each payment, which are used for Papero platform accounting purposes. We also store your Workflow runs (your topic, their settings, the sections written and the papers cited).

Why does Papero store this data?

We use the data we store to sign you in, to provide the Papero app (your documents, sharing links and comments, sources, the PDF files in your library, your chat conversations and usage limits) and to manage your subscription. We also use your Workflow runs to show you their progress and to put the sections they wrote into your document.

How to reach us?

To reach us, email contact@papero.ai.

How to withdraw your consent?

To withdraw your consent to us processing your data, email contact@papero.ai.

Where do we have your data from?

All the data we keep was provided to us by our customers:

  • when the customer created their account on the Papero platform
  • when an Account confirms its email address (or signs up with Google or GitHub), which also adds that address to our list for emails about getting started with Papero
  • when they use the Papero app, for example the documents they write, the sources they add and the PDF files they upload to their library

Why are you emailing me?

The emails that you receive from us are categorised as follows:

  1. emails about your account, such as sign-up confirmations, password resets and notices of new comments on documents you share
  2. emails that you receive regarding the subscription you have with us
  3. emails about getting started with Papero, which an Account receives once its email address is confirmed (or it signs up with Google or GitHub), with an unsubscribe link in each email

How do I request access to my data?

For requesting access to your data please follow the steps below:

Who are the sub-processors that Papero uses?

  • Stripe: for payments, and the customer record of every Account
  • Amazon AWS: for storing the invoices of our clients and the PDF files you upload to the Papero app, with the text extracted from them, in a secure environment
  • MailerLite: for sending our emails about the blog and Papero, and keeping the email addresses we send them to, with the language of the page where they were given and whether an Account is on Free or Plus
  • Amazon SES: for sending our emails, including the waitlist, account and comment notification emails
  • Google Workspace: for our email inbox at contact@papero.ai
  • Google Analytics and Google Tag Manager: for measuring how visitors use our website, only after they accept cookies
  • Hotjar: for heatmaps and session recordings of how visitors use our website, only after they accept cookies
  • OpenAI: for generating AI suggestions, rewrites, outlines, drafts, chat answers, charts and equations from the text you send to an AI feature and from passages of the PDF files you upload, and for computing embeddings of those passages and, on Plus, for computing embeddings and answers from the titles and abstracts of library papers without a PDF (processed in the United States, not used for training, kept for up to 30 days to monitor abuse) For Workflows, OpenAI also receives your topic, the titles and abstracts of the papers found and passages of your own PDFs.
  • Crisp: for the support chat on our website and the conversations held there; in the app, "Chat with us" opens the same chat on Crisp's own page
  • Google reCAPTCHA: for telling people from automated sign-ups on our sign-up form

All our sub-processors are fully GDPR compliant.

Who is the Data Protection Officer for Papero?

The Data Protection Officer assigned by Papero is Bogdan Popa.