Last updated: January 1, 2025

privacy policy

This privacy policy describes how paperwork.to collects, uses, and protects your personal information when you use our document processing services.

1. information we collect

We collect information you provide directly to us, including:

  • Account information (name, email, company name)
  • Documents you upload for processing
  • Usage data and analytics
  • Communications with our support team
  • Payment and billing information

2. how we use your information

We use the information we collect to:

  • Provide, maintain, and improve our document processing services
  • Process and analyze documents you submit
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

3. document processing and data retention

When you upload documents for processing:

  • Documents are processed in secure, encrypted environments
  • Processed data is stored only for the duration necessary to provide the service
  • You can request deletion of your documents at any time
  • We do not share your documents with third parties except as necessary to provide the service

By default, uploaded documents are automatically deleted after 30 days. Enterprise customers can configure custom retention periods.

4. data security

We implement industry-standard security measures to protect your data:

  • End-to-end encryption for all document transfers
  • SOC 2 Type II compliant infrastructure
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms
  • Data encryption at rest and in transit

5. UAE and international compliance

Our services are designed to comply with:

  • UAE Federal Law No. 45 of 2021 on Personal Data Protection
  • CBUAE regulations for financial data processing
  • GDPR requirements for EU data subjects
  • DIFC Data Protection Law for DIFC-based entities
  • ADGM Data Protection Regulations

6. your rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Object to processing of your personal information
  • Request data portability
  • Withdraw consent at any time

To exercise any of these rights, please contact us at privacy@paperwork.to.

7. cookies and tracking

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences
  • Analyze how our services are used
  • Improve our services based on usage patterns

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our services.

8. third-party services

We may share data with third-party service providers who assist in operating our services:

  • Cloud infrastructure providers (for hosting and processing)
  • Payment processors (for billing)
  • Analytics providers (for usage analysis)
  • Customer support tools

All third-party providers are bound by data processing agreements and are required to maintain appropriate security measures.

9. changes to this policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.

10. contact us

If you have any questions about this privacy policy or our data practices, please contact us:

Email: privacy@paperwork.to

Address: Dubai, United Arab Emirates

Website: paperwork.to