PaperlyHow Paperly works
Paperly is a PDF editing service. You can edit without an account. Opening and editing a PDF happens in your browser; choosing Save uploads your latest document, its original PDF and any required font or logo files to private storage.
Text recognition for scanned pages also runs in your browser; your pages are not uploaded for it. The first time you use a language, its recognition model is downloaded from a public content network.
Account and document data
When you sign in with Google, we verify your account identifier and email address. We use a necessary session cookie to keep you signed in. We do not request access to your Gmail messages or Google Drive.
Where sign-in with Facebook is offered, Facebook tells us your account identifier for Paperly and, if you allow it, your email address. We do not ask for anything else: not your friends, posts, photos or messages. Sign-ins with Google and with Facebook are separate Paperly accounts, even when they share an email address.
Cloudflare hosts the application, account records and saved files. Saved documents are available only through requests authenticated as their owner. We do not intentionally log document contents, sign-in tokens or payment secrets.
Your account record keeps your email address and when you first and last signed in. For support and to investigate payment problems, we keep a history of account activity for 90 days: sign-ins, saves, exports (format and page count), checkouts, pass changes and AI requests (their kind, size and credits). It does not include document names, contents, what you asked the AI assistant, or IP addresses. Authorized support staff can view your account record, passes and this history, and can add or withdraw a support-granted pass; every such access is logged.
Retention and deletion
Paperly keeps one latest saved draft per account. Previous source PDFs and fonts can remain stored and count toward your 100 MB storage allocation. Smaller replacement drafts do not immediately release reserved space. Contact us to clear your stored data or delete your account.
Backups are private and used for recovery. Deletion requests also need to cover backup copies; we will confirm the scope and completion with you. Keep your own copy of important documents.
Payments
Passes and AI credits are paid on Stripe's checkout pages, as described below. We never receive or store card numbers.
Who is responsible for your data
Werayuth Vangdangklang (Paperly) decides how and why personal data is used for Paperly (the data controller under Thailand's Personal Data Protection Act, PDPA). Use the contact page for any privacy request.
What we use, why, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Account identifier and email address from the service you sign in with (Google or Facebook) | Sign you in and keep your saved document and pass yours | Providing the service you asked for (contract) |
| Documents, original PDFs, fonts and logos you choose to save | Let you reopen your latest document | Contract |
| Orders: pass or AI credit pack, amount, currency, status and the payment provider's reference; the record of AI credits added to and used by your account | Give you the pass or credits you paid for; refunds; accounting | Contract; legal obligations for payment records |
| Activity history (90 days) and the support access log | Support, payment investigations, preventing misuse | Legitimate interests |
| Session cookie and request rate counters | Keep you signed in; protect the service from abuse | Contract; legitimate interests |
We do not sell personal data, show advertising or build marketing profiles. We never receive or store card numbers.
Who processes data for us
CCloudflareHosting and private storage
Cloudflare hosts the site, the database and saved files, and processes network data such as IP addresses to deliver and protect the service.
GGoogleGoogle sign-in
Google confirms your identity when you sign in.
MMeta (Facebook)Facebook sign-in
Meta (Facebook) confirms your identity when you choose to sign in with Facebook, on its own page and under its own privacy policy. No Facebook code runs on Paperly's pages.
SStripePayments
Stripe takes card, Link, Apple Pay and PromptPay payments on its own pages and handles that payment data under its own privacy policy. Link is Stripe's own service for saved payment details: if you use it, those details are kept by Stripe, not by us. Apple Pay is Apple's service and follows Apple's terms; we receive no card details from it either.
FFont discoveryGoogle Fonts and web search
Font matching compares images and text on your device. Google Fonts metadata and font files come from Google's public GitHub repository, through Paperly or directly from your browser when the server is temporarily unavailable. Direct requests disclose your IP address and requested public font path to GitHub, without document text, images or filenames. Search the web opens Google Search only when you click, using the query shown for your review. The chosen font file and style are stored with your document when you save.
jjsDelivrText-recognition languages
jsDelivr delivers the text-recognition language files; it sees your IP address and the language requested, never your pages.
YYour browser's speech serviceVoice input
Your browser's speech service (for example Google in Chrome or Apple in Safari) turns your voice into text when you turn on the microphone in the AI assistant. Paperly does not receive or store the recording.
AAnthropicAI assistant
Anthropic provides the AI model behind Paperly AI. When you ask the assistant to change text you selected, that text and your instruction are sent to Anthropic to write the result. In Selection, this is only the editable text in the Text tab and your instruction, without the crop image, text outside the selection or earlier chat messages. When you ask for a change with nothing selected, the text of the page you have open is sent with your instruction, so the assistant can find the part you mean; the chat says so before you send it. When you ask it to write a new document, your description of the document is sent, together with the document it wrote for you just before when you ask for a change to that. When you ask how to use Paperly, your question is sent with the name of the tool you have open and the kind of item that is selected. Nothing else from your document is sent, the assistant is used only after you agree to this, and Paperly does not keep the text, the instruction or the description.
These providers may process data on servers outside Thailand. We use established providers that commit to protecting personal data by contract.
Contact messages
When you submit the contact form, your topic, name (if provided), email address, message and any order number are sent through Resend to our support address, which Cloudflare Email Routing forwards to our support mailbox at Google (Gmail). Our replies are sent through Resend. We use them to answer your enquiry and handle support, payment or privacy requests, on the basis of providing the service or our legitimate interest in responding to enquiries.
Resend, Cloudflare and Google process these details to deliver and keep the email and may process them outside Thailand. Contact messages are not stored in Paperly's document database or activity history. Email copies and delivery records may remain in the support mailbox and with the delivery provider according to their retention policies. You can ask us to delete your contact messages through this contact page.
How long we keep it
- Sessions: valid for 7 days and deleted after they expire.
- Activity history: 90 days. Support access log: 12 months.
- Saved documents, PDFs and fonts: until you replace them, ask us to clear them, or delete your account.
- Order and payment records: as long as accounting and tax law requires.
Your rights
Under the PDPA you can ask us to:
- confirm what we hold about you and give you a copy;
- send your data to you or another provider in a usable format;
- correct data that is wrong or out of date;
- delete or anonymise your data, or stop using it for a time;
- stop a use you object to;
- withdraw consent, where we rely on consent.
Ask through the contact page from the email you use for Paperly. We verify ownership and answer within 30 days. You can also sign out or replace your saved document yourself at any time. If you are not satisfied with our answer, you can complain to Thailand's Office of the Personal Data Protection Committee (PDPC).
A privacy request? We answer within 30 days.
Contact usService provider: Werayuth Vangdangklang (Paperly)