Privacy Policy

This policy explains how Paperi, operated by Ing. Petr Bobák, Ph.D., Kleštínek 381/14, 621 00 Brno, Česká republika (the “controller”), processes personal data under the EU General Data Protection Regulation (GDPR).

1. What we collect

• Documents you upload — the PDFs you submit, and the text and figures extracted from them, in order to make your walkthrough.
• Email address — when you ask to be emailed when your video is ready, join the waitlist, subscribe, or request an access link.
• Technical data — IP address and request metadata, used for security, abuse prevention, and rate limiting.
• Subscription data — for paying users, billing details are handled by Stripe; we store your customer/subscription identifiers, status, and the email used at checkout (not your card number).
• A functional cookie (vp_uid) — a signed identifier that ties your library and subscription to your browser. It is strictly necessary for the Service and is not used for advertising.
• Anonymous visit statistics — we count page views to see which pages are used and where visitors arrive from. This uses no cookie and no tracking pixel: your IP address and browser string are combined with a random value that changes every day and are turned into a one-way code, and the originals are discarded — they are never stored. Because the daily value is deleted, the code cannot be traced back to you and cannot link your visits from one day to the next. The statistics are first-party, aggregate, for our own use only, and are never shared, sold, or used to build a profile or to advertise.

2. Why, and our legal basis

• To provide the Service (process your document, deliver the video, keep your library) — performance of a contract.
• To send transactional email (your link, billing notices) — contract.
• To secure the Service and prevent abuse (IP, rate limits) — legitimate interests.
• To understand how the site is used, via the anonymous visit statistics above — legitimate interests.
• To meet tax and accounting obligations for payments — legal obligation.

3. Processors and third parties

We share data only with providers that process it on our behalf:

• AI model provider (openrouter) — the text and figures of your uploaded document are sent to a third-party AI provider to generate the script and narration. Do not upload confidential material you are not comfortable processing this way.
• Stripe — payment processing for subscriptions.
• Email delivery (Resend) — to send your notifications and access links.
• Hosting / infrastructure — to run the Service.

Some providers may process data outside the EEA; where they do, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

4. Retention

Free-tier uploads and the walkthroughs they produce are retained for about 7 days and then deleted. For subscribers, your uploads and library stay available to you for as long as your subscription is active, and are deleted when you remove them or close your account — you can request erasure at any time. Account, subscription, and billing records are kept as long as needed for the Service and to meet legal obligations. Security logs are kept for a limited period. Anonymous visit statistics are kept for 90 days.

5. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. To exercise these rights, contact hello@paperi.ai. You also have the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ), Czech Republic.

6. Children

The Service is not directed at children and is intended for users who can enter into a contract.

7. Changes & contact

We may update this policy; material changes will be posted here. Data protection contact: hello@paperi.ai.