개인정보 처리방침

1. Data we collect

• Account: your email address, and when you sign in with Google, the name and profile picture Google provides. We don’t use passwords: you sign in with a link sent to your email, or with Google.
• Sign-in records: the time, IP address and browser or device details of each sign-in (on the web or in the desktop app), used to keep you signed in, to show your signed-in devices in account and security reviews, and to prevent abuse.
• Purchases: when you buy Papet Pro, the order status, amount, currency, time and Stripe order number. Card and other payment details are collected and processed by Stripe directly; we never receive them.
• Email records: the recipient, subject, time sent and delivery status of sign-in emails. We don’t keep the contents of emails, so we don’t keep sign-in links either.
• Download counts: the time, platform (macOS or Windows) and version when a download button on our website is clicked, not linked to any person.
• What you send us when you contact us, such as email correspondence.

We do not collect: the projects, lines, recordings, exported videos or character settings in the desktop app; the AI service keys you enter in Settings; or your contacts, location or browsing history. The website uses no advertising or third-party analytics cookies.

2. The desktop app

The desktop app keeps its data on your computer. It goes online only to:

• sign you in and check your plan (Free or Pro): papet.app;
• check for and download updates and built-in components (such as FFmpeg): s.papet.app;
• download speech recognition models: Hugging Face (or the mirror you choose);
• use AI services you set up yourself (for example Anthropic, OpenAI, Google Gemini, DeepSeek, Alibaba Cloud Qwen or ElevenLabs): your lines, recordings and similar content go from the desktop app directly to the provider you chose, not through us. How those providers handle data is governed by their own privacy policies;
• connect to AI assistants such as Claude or Codex over MCP: data passes between the desktop app on your computer and the assistant, and how the assistant handles it is governed by its provider’s policies.

3. How we use this data

• to sign you in, keep your plan in sync, activate Pro and send sign-in emails;
• to process payments, keep accounts and handle disputes;
• to keep the service secure: limiting request rates, spotting abuse and handling compromised accounts;
• to answer your questions and, when necessary, tell you about important changes to the service.

We don’t sell your personal data and we don’t use it for advertising.

4. Service providers we use

• Cloudflare: website hosting, database, file delivery and sending sign-in emails.
• Stripe: payment processing.
• Google: only when you choose to sign in with Google.

Otherwise we disclose data only when the law requires it or when it is necessary to protect our users and the security of the service. Our providers may process data in the United States or other countries and regions.

5. Cookies

The website uses only the cookies needed for signing in (to keep you signed in) and for remembering your language, plus a few preferences stored locally in your browser (such as interface settings). There are no advertising or cross-site tracking cookies.

6. How long we keep data

• Account data: until you delete your account.
• Sign-in records: deleted when the sign-in expires or you sign out.
• Purchase records: as long as tax and accounting rules require (usually several years), even after the account is deleted.
• Email records and activity logs: for a reasonable period needed for troubleshooting and security audits.

7. Your rights

You can ask at any time to see, export, correct or delete your account data, or to withdraw your consent. Email contact@papet.app from your account’s email address so we can confirm it’s you. Once your account is deleted you can no longer sign in; the projects in the desktop app stay on your computer and are not affected. Depending on the law where you live, you may also complain to your local data protection authority.

8. Security

Data travels over HTTPS, and the desktop app stores its sign-in credentials encrypted on your device. No system can be guaranteed to be completely secure; if a data breach affects you, we will tell you as the law requires.

9. Children

Papet is not intended for children under 13 (or the higher age set where you live), and we don’t knowingly collect their personal data. If you believe we have, contact us and we will delete it.

10. Changes to this policy

We may update this policy and will change the date at the top when we do. We will announce significant changes in advance on the website or by email.

11. Contact us

BlendDuck LLC · contact@papet.app