Security & privacy

Where your data lives

Your uploaded files are stored and processed in Canada (AWS, ca-central-1). Your sign-in identity (your email address and authentication) is handled by Clerk in the United States under Standard Contractual Clauses and the EU–US Data Privacy Framework. File data and identity data are kept separate.

How your files are protected

Your files are encrypted the whole way. They travel over a secure (HTTPS) connection as they upload, and they are encrypted at rest once stored in Canada. Uploads that are not sent securely are rejected.

Who we work with

Subprocessors

Vercel (web hosting), Clerk (sign-in & identity, and its sub-processors Google Cloud, SendGrid, and Cloudflare), and Amazon Web Services (file storage, ca-central-1).

How long we keep it

Uploaded files are kept for 12 months. Because our storage keeps a short-lived backup copy of every file, the last copy is erased about one month after that.

Your sign-in identity (your email address) is retained by Clerk only while your Paperminds engagement is active, and deleted within 30 days of account closure. It is kept separate from the 12 months of file retention above.

Privacy questions

Privacy questions? Contact our privacy officer, Zhen Chen, at zhen@paperminds.ai.