Legal
Privacy Policy
We're Paperflow, a voice-first task app for Mac. This policy explains what information we collect when you use Paperflow, why we collect it, and what we do with it.
The short version
- Your tasks and notes live on your Mac. We never see them or store them on our servers.
- When you dictate, your voice is sent to OpenAI for transcription and discarded immediately afterwards.
- The transcript is sent to Anthropic to be turned into structured tasks, then discarded.
- Your account (email, plan, monthly word count) is managed by Clerk on our behalf.
- We never see your card details — Stripe handles payments through Clerk.
- We don't sell your data. We don't use your content to train AI models.
Who we are
Paperflow is operated by [Your Legal Entity Name]. You can reach us at support@paperflow.it.com.
Information we collect
Account information
When you create a Paperflow account through Clerk, we receive your email address, and — if you sign in with Google — your name and profile picture. We also receive a unique account identifier. This information is stored by Clerk on our behalf. We do not store your password.
Voice recordings (transient)
When you dictate, the audio is streamed from your Mac to our backend, forwarded to OpenAI's Whisper API for transcription, and discarded as soon as the text is returned. We do not retain voice recordings.
Transcribed text (transient)
Your transcript is sent to Anthropic's Claude API to be parsed into structured tasks. Neither the transcript nor the parsed result is stored on our servers — both are returned to your Mac and saved locally.
Tasks and notes
Tasks and notes are stored in local storage on your Mac. They never leave your device except during the brief processing window described above.
Usage data
We count the number of words you transcribe each month so we can enforce plan limits. The counter resets at the start of each calendar month. It is stored by Clerk in your account metadata.
Payment information
If you upgrade to Pro, payments are processed by Stripe through Clerk Billing. We never see your card number. We do receive a record of whether your subscription is active and which plan you're on.
Logs
Our backend keeps short-lived operational logs (request timings, error traces) for debugging and reliability. Logs do not contain transcript or task content.
How we use information
We use the information we collect to:
- Provide and operate the Paperflow app and the service that powers it
- Authenticate you and keep your session secure
- Process your voice into structured tasks (the core function of the app)
- Enforce free-tier word limits
- Process subscription payments
- Communicate with you about the service when needed
We do not sell your data. We do not use your tasks, notes, or transcripts to train AI models, and our underlying AI providers don't either by default on the API plans we use.
Third-party processors
We rely on these companies to operate the service. Each is contractually bound to protect your data.
- Clerk — authentication, account management, billing orchestration. Privacy policy
- OpenAI — transcription via the Whisper API. By default, OpenAI does not use API content to train models. Privacy policy
- Anthropic — text parsing via the Claude API. Anthropic does not use API content to train models. Privacy policy
- Stripe — payment processing via Clerk Billing. Privacy policy
- Google — if you sign in with Google, OAuth is handled by Google. Privacy policy
- Render — backend hosting (US region). Privacy policy
- Vercel — marketing site hosting. Privacy policy
Data retention
- Voice recordings — not retained; discarded after transcription.
- Transcripts — not retained; discarded after parsing.
- Tasks and notes — stored locally on your Mac for as long as you keep them. Not retained on our servers.
- Account information and usage counters — kept while your account is active.
- After account deletion — data is removed within 30 days, except where we're required to retain it (for example, billing records for tax purposes).
Your rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email support@paperflow.it.com. We'll respond within 30 days.
Permissions on your Mac
Paperflow asks for two macOS permissions:
- Microphone — required for dictation.
- Accessibility — required to listen for the global hotkey that triggers the dictation pill from anywhere on your Mac.
These permissions are granted to the app on your device. We do not use them to capture data outside the dictation flow.
Children's privacy
Paperflow is not intended for use by anyone under 13. We don't knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.
International transfers
Our backend currently runs in the United States. If you're using Paperflow from outside the US, your data will be transferred to and processed in the US. We rely on standard contractual clauses or equivalent safeguards where required by law.
Changes to this policy
If we make material changes, we'll notify you by email and update the date at the top of this page. Continued use after changes take effect constitutes acceptance.
Contact
For privacy questions, data requests, or concerns, email support@paperflow.it.com.