Data Processing Agreement
Last updated: March 2026
Data Subjects and Processing
PaprNote is committed to protecting the privacy and security of your personal data. This Data Processing Agreement outlines how we collect, use, store, and protect your information in compliance with applicable data protection regulations including GDPR, CCPA, and other data protection laws.
Your Rights
Under applicable data protection laws, you have the following rights:
- Right to access your personal data
- Right to correct inaccurate data
- Right to deletion (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
Data Storage and Security
Your data is stored securely on encrypted servers and accessed only by authorized PaprNote staff. We implement industry-standard security measures including:
- Encryption in transit and at rest
- Regular security audits and penetration testing
- Access controls and authentication
- Backup and disaster recovery procedures
- Data retention policies
Data Retention
We retain your personal data for as long as necessary to provide our Service or as required by law. You can request deletion of your account and associated data at any time. Upon deletion, non-personally identifiable aggregated data may be retained for analytical purposes.
Third-Party Data Sharing
We do not sell, rent, or share your personal data with third parties without your explicit consent, except:
- Service providers who process data on our behalf under data processing agreements
- When required by law or legal process
- To protect the rights, privacy, safety, or property of PaprNote or our users
- With your explicit consent
Data Transfer
If you are located in the EU or other jurisdictions with data protection laws, your data may be transferred to and processed in the United States or other countries where PaprNote operates. Such transfers comply with applicable data protection regulations.
Exercising Your Rights
To exercise any of the rights mentioned above, or to request a Data Processing Agreement, please contact us at:
We will respond to your request within 30 days in accordance with applicable law.
Additional Compliance Documents
Standard Data Processing Agreements (DPA), Standard Contractual Clauses (SCC), and other compliance documents are available upon request. Contact our privacy team to request or discuss any specific data processing requirements.