Privacy Policy

This Privacy Policy explains how ZeroPaperHub ("ZeroPaperHub", "we", "us") collects, uses, stores, and protects information when you use our website and document preservation service (the "Service"). By using the Service, you agree to the practices described here.

1. Who we are

ZeroPaperHub is a digital document preservation platform operated from Kochi, Kerala, India. For any privacy question or request, contact us at [email protected].

2. Information we collect

Information you provide

• Account details — your name, email address, password (stored only as a secure hash), and the name of the organization you create or join.
• Content you upload — the documents, images, files, folder names, and any metadata or notes you add to your archive.
• Billing information — if you subscribe to a paid plan, payments are processed by our payment provider (Razorpay). We receive confirmation of payment, plan, and billing status, but we do not store your full card details.
• Support communications — messages you send us by email.

Information collected automatically

• Usage and audit data — actions taken within your organization (uploads, downloads, views, shares, edits, sign-ins) are logged with a timestamp and user reference for security and audit purposes.
• Technical data — IP address, browser type, device information, and pages accessed, used to operate and secure the Service.
• Cookies — see Section 8.

3. How we use information

• To provide, maintain, and secure the Service and your archive.
• To authenticate you and enforce role-based access within your organization.
• To process subscriptions, payments, and renewals.
• To maintain audit logs and detect, investigate, and prevent abuse or security incidents.
• To respond to your support requests and send service-related notices (for example, verification emails, security alerts, and billing notifications).
• To comply with legal obligations.

We do not sell your personal information, and we do not use the contents of your documents for advertising or to train machine-learning models.

4. Legal bases for processing

Where applicable law requires a legal basis, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent misuse); your consent (for non-essential cookies, where used); and compliance with legal obligations.

5. How we share information

We share information only as follows:

• Within your organization — content and activity are visible to other members of your organization according to the permissions your administrators set.
• Service providers — infrastructure hosting, object storage (Cloudflare R2), email delivery, and payment processing (Razorpay), each acting on our instructions under contractual confidentiality and security obligations.
• Legal and safety — where required by law, court order, or to protect the rights, property, or safety of ZeroPaperHub, our users, or the public.
• Business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data storage and security

• Documents are encrypted in transit and at rest.
• Downloads are served through short-lived, signed URLs rather than permanent public links.
• Each organization's data is logically isolated so that one organization's archive is never mixed with another's.
• Optional two-factor authentication and role-based permissions are available to protect account access.

No method of transmission or storage is completely secure, but we work to protect your information using appropriate technical and organizational measures. Data may be stored and processed on infrastructure located outside India; where it is, we take steps to ensure a comparable level of protection.

7. Data retention

• Documents and folders you delete are moved to a recycle bin and are recoverable for 30 days, after which they are permanently purged.
• Audit logs are retained for as long as needed for security and compliance purposes.
• If you close your account or your organization is deleted, we delete or anonymize your content and personal data within a reasonable period, except where retention is required by law or for legitimate business records (such as billing history).

8. Cookies

We use strictly necessary cookies to keep you signed in, remember your session, and protect against cross-site request forgery. These are required for the Service to function. We do not use third-party advertising or cross-site tracking cookies.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update most account information directly in your profile settings, or contact us at [email protected] and we will respond within a reasonable time. If your data was provided to us by an organization (your employer, for example), we may direct your request to that organization's administrator.

10. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the Service. Continued use of the Service after changes take effect means you accept the revised Policy.

12. Contact

Questions or requests: [email protected]
ZeroPaperHub, Kochi, Kerala, India.