Privacy Policy

Last Updated: March 18, 2025

Introduction

Welcome to our privacy policy. Your privacy is critically important to us, and we are committed to being transparent about how we collect, use, and share your information.

This Privacy Policy describes how we collect, use, and disclose your personal information when you use our service (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you create an account and use our Service, we collect several types of information from and about you:

Technical Information

We also collect certain technical information automatically when you use our Service:

How We Use Your Information

We use your personal information for the following purposes:

Third-Party Services

Authentication Providers

Our Service allows you to sign in using Google or Facebook authentication services. When you choose to sign in using these services, we may collect personal information that these services make available to us, such as your name, email address, and profile picture.

AI Service Providers

We use Google Gemini and/or other AI providers to generate personalized fitness plans, workout routines, and nutritional advice. These AI services may process certain information you provide to generate relevant content but do not store your personal information.

Hosting and Infrastructure

We host our Service and store your data on Amazon Web Services (AWS). AWS implements security measures to protect your information, and your data is stored in PostgreSQL databases within AWS infrastructure.

Payment Processing

We use Stripe for payment processing. When you make a payment, your payment information is collected directly by Stripe and is subject to Stripe's privacy policy. We store only limited payment information such as your Stripe customer ID and subscription status.

Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for legal, accounting, or reporting obligations.

If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legitimate business or legal purposes.

Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from your country's laws.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR. – See more

We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please email us at support@papermark.io.

In certain circumstances, you have the following data protection rights:

the right to access, update or to delete the information we have on you; the right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete; the right to object. You have the right to object to our processing of your Personal Data; the right of restriction. You have the right to request that we restrict the processing of your personal information; the right to data portability. You have the right to be provided with a copy of your Personal Data in a structured, machine-readable and commonly used format; the right to withdraw consent. You also have the right to withdraw your consent at any time where we rely on your consent to process your personal information; Please note that we may ask you to verify your identity before responding to such requests. Please note, we may not able to provide Service without some necessary data.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Children's Privacy

Our Service is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Legal Rights and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of province of Alberta, Canada. Any disputes relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of province of Alberta, Canada.