Privacy policy

Your research is unpublished work, and we treat it that way. This policy explains what Jheyanth CS (“Paprica”) collects, why, and what control you have. It is written to meet India’s Digital Personal Data Protection Act, 2023, and similar laws.

What we collect

• Google sign-in: when you sign in with Google, Google shares your name, email address, profile picture and Google account identifier with us. We use them only to sign you in and show your account. If you sign in with an emailed code instead, we keep only your email address.
• Your documents: the files you upload, the text we extract from them, free samples you paste, and the edited output.
• Feedback: after an edit, your one-tap answer to “Was this usable?”.
• Detector reports: optional. If you upload the detector report your institution gave you, we keep the PDF and the text we read from it privately with that project. We use it only to measure how well Paprica’s edits work, in aggregate. It is never shown to anyone else, never a basis for refunds, and erased with the project.
• Usage records: projects, runs, word counts, fidelity-check results and error logs, which we need to operate and bill the Service. Each free sample is recorded against your account with its word count and a one-way hash of your network address, which we use only to spot abuse.
• Referral signals: if you arrive through someone’s referral link, or share your own, we compare a one-way hash of your network address, a one-way hash of a random id for your browser and your email address with the other person’s. We use them only to detect someone referring themselves, which stops that referral counting toward a free report.
• Payment records: the plan you bought and a payment reference. Card, UPI and bank details go directly to Dodo Payments; we never see or store them.

How we use it

• To edit and check your documents and deliver the output to you.
• To run your account, take payment, prevent abuse of free samples and give support.
• To measure aggregate usage, such as words processed and failure rates, to set prices and keep the Service working.
• To measure the quality of our edits from your feedback and any detector report you choose to share. A detector report never decides a refund; refunds follow the refund policy.

We do not sell your data, use it for advertising, or use your documents to train our own models.

Who processes it for us

We use a small number of service providers, each only for the purpose listed:

• AI processing providers, which receive the text of your document to perform the editing and fidelity check you request.
• Cloud hosting and storage (including Cloudflare), which hosts the Service and stores files encrypted at rest.
• Dodo Payments, our merchant of record, which processes payments and issues invoices.
• Email delivery, which sends sign-in codes and account notices.

Some of these providers process data outside India. We choose providers that protect it to the standard this policy describes.

How long we keep it

• Paid projects and their files stay available while your account is active so you can return to them.
• If you upload a document but don’t pay for that project, we erase the upload and its project 30 days after you last uploaded to or renamed it.
• When you delete a project, it disappears from your account immediately and is permanently erased, including stored files, within 30 days.
• When you delete your account, we erase your data within 30 days, except payment records we must keep by law. We keep a one-way hash of your email address, used only to enforce the limit of two free reports in 12 months.
• Encrypted backups are kept for up to 30 days and then overwritten.

Security

Files are stored privately and encrypted at rest. Downloads use links that expire within minutes. Provider credentials stay on our servers and are never sent to your browser. Access to production systems is limited to the operator and protected by private networking.

Your rights

You can access, correct or delete your personal data, withdraw consent, and nominate someone to exercise these rights for you. Most of this you can do from your dashboard. For anything else, or to raise a grievance, email hello@paprica.work and we will respond within 30 days.

Cookies

We use only cookies the Service needs, all set by our own servers:

• Session cookie (paprica_session): keeps you signed in, for up to 30 days or until you sign out.
• Sign-in cookie (paprica_oauth): holds the state of a Google sign-in, for up to 10 minutes.
• Referral cookie (paprica_ref): remembers the referral link you arrived with until you sign in, for up to 30 days.
• Device cookie (paprica_device): a random id for your browser, kept for a year. We store only a one-way hash of it, and use it only to detect self-referral.

We don’t use advertising or cross-site tracking cookies. On this website we count page visits with Cloudflare Web Analytics, which sets no cookies and doesn’t follow you to other sites.

Changes

If we change this policy in a way that affects you, we will tell you by email or in the app before the change applies.

Contact

Jheyanth CS, Plot 53, 54, Paari Street, VGP Shanthi Nagar, Chennai 600 100, Tamil Nadu, India. Email: hello@paprica.work.