Privacy Policy

1. Introduction

Webease, LLC ("Company," "we," "us," or "our") operates PaperPad at paper-pad.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service. By using PaperPad, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: email address, name, and password (or OAuth provider credentials)
• Trade journal entries: ticker symbols, prices, quantities, dates, and personal notes you record
• Payment information: billing details processed securely through Stripe — we do not store your full credit card number
• Communications: messages you send to our support team

2.2 Information Collected Automatically

• Usage data: pages viewed, features used, session duration, and interaction patterns
• Device information: browser type, operating system, screen resolution, and language preference
• Log data: IP address, access times, and referring URLs

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process subscriptions and payments
• To send transactional emails (account verification, billing receipts, security alerts)
• To generate aggregated, anonymized analytics to improve the platform
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your individual trade journal data for marketing or advertising purposes.

4. Third-Party Services

We may share data with third-party service providers as necessary to operate the Service, including payment processing, authentication, database hosting, and market data services. We require all third-party service providers to maintain appropriate security measures and to process your data only as necessary to provide services to us. Each third-party provider operates under its own privacy policy.

5. Cookies & Tracking

We use the following categories of cookies:

• Essential cookies: required for authentication, session management, and security — cannot be disabled
• Analytics cookies: help us understand how the Service is used — optional, managed through our cookie consent banner

We do not use advertising cookies or third-party tracking for ad targeting. You can manage your cookie preferences at any time through the cookie settings in the site footer.

6. Data Security

We implement industry-standard security measures to protect your data, including: encryption in transit (TLS) and at rest, row-level security policies on database tables, secure authentication via OAuth 2.0 and bcrypt password hashing, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Trade journal data is retained until you delete it or request account deletion. After account deletion, we may retain anonymized, aggregated data that cannot be linked back to you. We retain billing records as required by applicable tax and accounting laws (typically 7 years).

8. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to the United States and other jurisdictions that may have different data protection laws than your country of residence. Where required, we implement appropriate safeguards for cross-border data transfers.

9. Your Rights

9.1 All Users

You have the right to:

• Access and export your personal data at any time from your account settings
• Correct inaccurate personal information
• Delete your account and associated data
• Withdraw consent for optional data processing (e.g., analytics cookies)

9.2 European Economic Area (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including: the right to data portability, the right to restrict processing, the right to object to processing based on legitimate interests, and the right to lodge a complaint with your local data protection authority.

9.3 California Residents (CCPA)

If you are a California resident, you have the right to: know what personal information we collect and how it is used, request deletion of your personal information, opt out of the sale of personal information (we do not sell personal information), and non-discrimination for exercising your privacy rights.

10. Children's Privacy

PaperPad is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email to your registered email address at least 14 days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, data access requests, or to exercise any of your rights described above, please contact us at:

Webease, LLC
Email: [email protected]
paper-pad.com