Privacy Policy

This Privacy Policy describes how Paper Instruments, Inc. (“Paper Instruments,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes Personal Information in connection with the Services. Capitalized terms that are not defined in this Privacy Policy have the meanings given in our Terms of Service. “Personal Information” means information that identifies, relates to, or describes an individual, or that could reasonably be linked, directly or indirectly, to an individual.

Scope of this Privacy Policy

This Privacy Policy applies to Personal Information that we process as a controller or business, including information about visitors to the Website, users of Feather, customers of the API, and individuals who contact us.

This Privacy Policy does not apply to Content we process solely on a customer’s behalf under an Enterprise Agreement or through the API. That processing is governed by our agreement with the customer, and individuals should direct questions about it to the relevant customer. This Privacy Policy applies to Account information and any processing for which we act as a controller or business.

This Privacy Policy also does not apply to open-source software or open-weights models that you obtain from us and run yourself, which are governed by their own licenses, or to third-party websites and services, including Connected Accounts, which process information under their own privacy policies.

Information we collect

Information you provide

• Account information. When you create or manage an Account, we collect your name, email address, and related identifiers. If you purchase paid Services, we also collect billing information, such as your organization name, billing contact details, and transaction history.
• Content. We collect the Inputs you submit to the Services and the Outputs the Services generate. When Feather performs a task, it sends your requests, and the material it reads in performing the task, to our servers and to AI model providers. That material may include files in folders you choose, web pages, and information from Connected Accounts. If you turn on the optional sync feature, we also store your conversations with Feather on our servers.
• Communications. If you contact us or provide feedback, we collect your contact information, the contents of your communication, and any Content you choose to share with us.

Information from Connected Accounts and other services

If you connect a Connected Account, or direct Feather to browse the web or use another third-party service, we receive information from that account or service in performing tasks at your direction, such as emails, messages, documents, files, calendar entries, records, and web pages. This information forms part of your Inputs.

Information collected automatically

• Log and device information. When you use the Services, we and our service providers automatically collect information such as your IP address, device type, operating system, app version, browser type, the dates and times of access, and information about errors and performance.
• Usage information. If you turn on usage analytics, we collect information about how you use Feather, such as the features you use and the outcome and duration of tasks. We also collect information about visits to the Website, such as the pages viewed, the referring page, and approximate location derived from your IP address.
• Cookies and similar technologies. We and our service providers may use cookies, local storage, and similar technologies to operate the Services, keep you signed in, remember your preferences, and understand how the Services are used.

Third-party websites and services that you access through Feather may collect Personal Information about your online activities over time and across different websites and services.

Information from third parties

We receive Personal Information from authentication providers when you sign in through them, such as your name, email address, and account identifiers. We also receive information about your transactions and payment status from payment processors, and business contact information from publicly available sources and business data providers.

How we use information

We use Personal Information to:

• Provide, operate, and maintain the Services, including performing the tasks you request and providing optional features that you enable.
• Create and administer Accounts, authenticate users, and process payments.
• Communicate with you, including to respond to your requests and to send you information about your Account, the Services, and changes to our terms and policies.
• Analyze, improve, and develop the Services, subject to “Model Training” below.
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service, which may include reviewing Content.
• Comply with legal obligations, resolve disputes, enforce our agreements, and protect the rights, property, and safety of Paper Instruments, our users, and others.
• Carry out any other purpose that we describe when we collect the information or to which you consent.

Model Training

We use your Content for Model Training only if you opt in. You may withdraw your consent at any time in the app. Withdrawal applies to future Model Training using your Content and does not affect processing lawfully undertaken before withdrawal. Except where applicable law requires otherwise, it does not affect models already trained. Regardless of your choice, we do not use for Model Training information received from Connected Accounts, Content processed under an Enterprise Agreement, or API Inputs and Outputs, and we do not use your Content to train models that we release as open weights. If you opt in, people we authorize may review the Content that we use for Model Training.

Aggregated and de-identified information

We may create aggregated or de-identified information that can no longer reasonably be linked to you, and we may use it for the purposes described in this Privacy Policy, subject to the restrictions in “Model Training.” We maintain and use de-identified information in de-identified form and do not attempt to re-identify it, except as permitted by law.

Information from Google APIs

Paper Instruments’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. These restrictions control over any other permission in this Privacy Policy.

How we disclose information

We disclose Personal Information to the following categories of recipients:

• Service providers. We disclose Personal Information to vendors that process it on our behalf to help us operate the Services, including providers of hosting and infrastructure, AI models, authentication, analytics, payment processing, integrations for Connected Accounts, and customer support and communications. We also disclose Personal Information to our professional advisers, such as lawyers, accountants, and auditors.
• Services you direct us to use or connect. When you direct Feather to use a Connected Account, website, or other third-party service, or to take an action in one, we disclose Content to that service and to any recipients of that action, such as the recipients of a message that Feather sends at your direction.
• Affiliates. We may disclose Personal Information to entities that control, are controlled by, or are under common control with Paper Instruments, which will process it in a manner consistent with this Privacy Policy.
• Business transfers. We may disclose Personal Information to counterparties and their advisers in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, or similar transaction, and we may transfer it as part of that transaction.
• Legal and safety. We may disclose Personal Information to government authorities, courts, or other third parties if we believe in good faith that disclosure is necessary to comply with law or legal process, respond to lawful requests, protect the rights, property, or safety of Paper Instruments, our users, or others, detect or prevent fraud, abuse, or security incidents, or enforce our agreements.
• With your consent. We may disclose Personal Information to other parties when you consent to, or direct us to make, the disclosure.

We do not sell Personal Information or share it for cross-context behavioral advertising.

Retention

We retain Personal Information for as long as necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements, after which we delete or de-identify it. In determining how long to retain information, we consider its nature and sensitivity, the purposes for which we process it, your settings and requests, and applicable legal requirements. We may retain information for longer where the law requires or permits, or where the information is subject to a legal hold. Residual copies may remain in backup systems for a limited period before they are deleted.

Your rights and choices

Your rights

Depending on where you live, and subject to applicable exceptions, you may have the right to:

• Access your Personal Information and obtain a copy of it, including in a portable format.
• Correct inaccurate Personal Information.
• Delete your Personal Information.
• Object to or restrict certain processing of your Personal Information.
• Withdraw your consent, where we rely on consent, without affecting processing that occurred before the withdrawal.
• Appeal a decision we make on your request.

Except where applicable law requires otherwise, deletion of your Personal Information does not affect models already trained. Outputs may contain inaccurate information about individuals. If you ask us to correct such information, we will consider your request, but we may be unable to change what a model produces.

Your choices

You may opt in to or withdraw from Model Training, and turn the optional sync feature and usage analytics on or off, in the app. You may opt out of promotional emails by following the instructions in those emails, although we may continue to send you messages about your Account and the Services.

Submitting requests

To exercise your rights, email founders@paperinstruments.com, from the email address associated with your Account if you have one. We may need to verify your identity before acting on a request, as permitted by applicable law. You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may ask you to verify your identity directly with us. We will respond within the time the law requires. If we deny your request, you may appeal by replying to our decision. We will not discriminate against you for exercising your rights.

Additional U.S. state disclosures

This section supplements this Privacy Policy for residents of California and other U.S. states with comprehensive privacy laws. We collect the following categories of Personal Information from the sources, and for the purposes, described below, and we disclose each category for a business purpose to the categories of recipients described below. We retain each category according to the criteria in “Retention.”

We may also disclose each category to affiliates, in business transfers, for legal and safety reasons, and with your consent, as described in “How we disclose information.”

We have not sold Personal Information or shared it for cross-context behavioral advertising in the preceding 12 months, and we have no actual knowledge of selling or sharing the Personal Information of consumers under 16. We do not use or disclose sensitive personal information to infer characteristics about you. The Services do not respond to Do Not Track signals.

Residents of these states may have the rights described in “Your rights and choices,” including the right to know the categories and specific pieces of Personal Information we have collected, the categories of sources, the purposes for collection, and the categories of recipients, and the right to opt out of the sale or sharing of Personal Information and of targeted advertising. To exercise these rights, follow “Submitting requests.”

EEA, UK, and Switzerland

This section applies if you are in the European Economic Area, the United Kingdom, or Switzerland.

Controller

Paper Instruments, Inc. is the controller of the Personal Information described in this Privacy Policy. For Content we process on a customer’s behalf under an Enterprise Agreement or through the API, we act as its processor or subprocessor, as applicable.

Legal bases

We process Personal Information on the following legal bases:

• Contract, where necessary to perform our contract with you, including providing the Services, administering your Account, and processing payments.
• Legitimate interests, to secure the Services and prevent fraud and abuse, to analyze and improve the Services, to communicate with you, to enforce our agreements, to carry out corporate transactions, and to establish, exercise, or defend legal claims, in each case where those interests are not overridden by your rights and interests.
• Consent, for Model Training, usage analytics, and other processing where the law requires consent, which you may withdraw at any time.
• Legal obligation, to comply with applicable law, including tax, accounting, and law enforcement requirements.

Providing Account information is necessary to use Feather and the API. If you do not provide it, we cannot provide those Services to you.

International transfers

We are based in the United States, and we and our service providers process Personal Information in the United States and in other countries whose data protection laws may differ from those where you live. When we transfer Personal Information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses approved by the European Commission and their UK and Swiss equivalents. You may contact us to obtain a copy of the applicable safeguards.

Your rights and complaints

You have the rights described in “Your rights and choices,” including the right to object at any time to processing based on our legitimate interests and to processing for direct marketing. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work or where an alleged infringement occurred.

Security

We maintain reasonable technical, administrative, and organizational measures designed to protect Personal Information against unauthorized access, loss, misuse, alteration, and disclosure. No method of transmission or storage is completely secure, and we cannot guarantee the security of Personal Information. You are responsible for the security of your devices and Account credentials, and for the information you choose to make available to the Services.

Children

The Services are not directed to individuals under 18, and we do not knowingly collect Personal Information from them. If you believe that an individual under 18 has provided Personal Information to us, please contact us, and we will take appropriate steps to delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised date. If we make a material change, we will notify you by reasonable means, such as by email or through the Services.

Contact us

For questions about this Privacy Policy, or to exercise your rights, contact us at founders@paperinstruments.com or by mail at Paper Instruments, Inc., 1606 Stockton St #201, San Francisco, CA 94133, United States.