Privacy policy · PaperTotal

This policy explains what PaperTotal collects, why, which companies handle it for us, and what you can do about it. “We” means Kimeur Labs, LLC, 4848 Lemmon Ave STE 420, Dallas, TX 75219. It covers papertotal.com, the PaperTotal apps and the PaperTotal API.

What we collect

Account details: your name, email address, sign-in method, language and time zone, plus a phone number or photo if you add one.
Workspace details: the workspace name, country, currency, members and their roles.
What you send us: photos, PDFs, forwarded emails, and files sent through the API, including everything printed on them.
What we read from it: merchant, date, amounts, tax, tip, payment type and the last four digits of a card.
Records you create: expenses, reports, approvals, mileage, notes and comments.
Location, only if attached: a capture time and place, when your device or your software sends them with a document.
Billing details: your plan, its status and your billing history. Stripe holds your payment details on the web, Apple and Google will hold them for store purchases once the iOS and Android apps are out, and we do not store full card numbers.
Technical data: IP address, browser and device type, request logs and error reports. The web app also keeps a random id in your browser and sends it with each upload.
Messages: what you send to support, by email or through the question box on the pricing page, with the address you give us to answer you at.

We do not receive your password. Google Firebase Authentication handles sign-in, including sign-in with Google or Apple.

How we use it

To provide PaperTotal: reading documents, filing them, and building reports, exports and approvals.
To send the emails and notifications the product needs, such as a report waiting for your approval.
To bill you and keep billing records.
To keep PaperTotal secure, prevent abuse and fix faults.
To meet our legal obligations.

We do not sell your personal information. We do not use your documents for advertising, and we do not use them to train machine learning models.

How documents are read

Software running on our own hosted servers reads each document first. When second reading is enabled and the first reading could not settle a document, images of its pages and the text read from them go to Anthropic, whose Claude model gives a second reading. Card numbers are masked in the text before it is stored, logged or sent. The image stays as you sent it, so a receipt that prints a full card number still shows one. If Claude is enabled and a workspace writes a rule that asks it a question about a document, the text read from that document goes to Anthropic too, with sensitive numbers masked.

Software on those same servers also checks each document for signs that it was edited or generated, using what the file says about itself, its pixels, its arithmetic and earlier documents in the same workspace, along with the browser id above and how many documents each person sends. The findings go to people in your workspace who can read everyone’s expenses, and whoever sent a document sees the ones they can fix, such as totals that do not add up. They are evidence to weigh: only a person can decide what they mean, they never stop a document being filed, and a workspace can turn each check off. Nothing is compared across workspaces.

Who handles your data

These companies process data for us. We share only what each one needs to do its job.

Company	What it does	Data it handles
Railway	Hosts the API, background workers, the reading service and the databases.	Your account and workspace records, and files only while they are being read.
Vercel	Hosts papertotal.com and the PaperTotal web app.	Web requests, including IP address and browser details.
Cloudflare	Stores every file on R2, runs DNS, receives mail sent to receipts@papertotal.com and sends our email.	Every photo, video and document you send us, forwarded emails and their attachments, exports, email addresses and the messages we send you.
Google Firebase	Handles sign-in and push notifications.	Your name, email address, sign-in identifiers and device tokens.
Stripe	Takes payments, manages subscriptions and calculates tax on the web.	Billing contact details and payment details.
CashSDK	Will keep your plan in step with App Store and Google Play purchases once the iOS and Android apps are out. Nothing goes to it before then.	Your workspace id, your plan and the status of the store purchase.
Google Maps Platform	Measures the distance of a trip, when you ask it to.	The start and end addresses of that trip.
Plaid	Connects a bank or card account, when you choose to link one.	Your bank sign-in, which goes to Plaid and never to us, plus account names and transactions.
Sentry	Collects error reports from our servers so we can fix faults.	Error details and request paths, which can include record ids.
Anthropic	Gives a second reading of a document the first reading could not settle, when second reading is enabled, and answers a question about a document when a workspace writes a rule that asks one.	Images of the document’s pages and the text read from them, with card numbers masked in that text. For a rule, only the text, with sensitive numbers masked.

We also share data when you ask us to, such as when you connect your accounting system, and when the law requires it. If PaperTotal is sold or merged, your data would pass to the new owner under this policy.

If you connect Gmail, PaperTotal reads messages that look like receipts and files them as documents in your workspace. PaperTotal’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use that data for advertising, and we do not use it to train machine learning models.

How long we keep it

Raw forwarded emails are kept for up to 30 days, then dropped.
Documents and records are kept while your account or workspace exists, including after a plan lapses, so that you can still read and export them.
After you delete your account, it closes right away and your data follows within 30 days. See account deletion for what is removed and what is kept.
A workspace an owner closes is out of reach right away, and its records and files are deleted after 14 days.
Invoices and payment history stay with Stripe, Apple or Google for as long as tax and accounting law requires.

Your choices and rights

Get a copy: export your records from the app at any time, on any plan status.
Correct it: change your details and records in the app.
Delete it: follow the steps on the account deletion page.
Ask us: write to privacy@papertotal.com. Depending on where you live, you may have the right to access, correct, delete or move your data, and to object to or limit how we use it. We answer within 30 days and will not treat you differently for asking.

If you use a workspace that belongs to your employer or a client, that organization decides what happens to the records in it, and it may be the right place to send your request.

Cookies

papertotal.com sets no advertising or analytics cookies. The PaperTotal app stores what it needs to keep you signed in.

Security

Our security page says what is in place and what is not.

Where data is processed

We are based in the United States. We and the companies above may process your data in the United States and other countries.

Children

PaperTotal is for adults keeping business records. It is not for anyone under 18.

Changes to this policy

If we change this policy in a way that matters, we will update this page and tell you by email or in the product before the change takes effect.

Contact

Privacy questions: privacy@papertotal.com
Everything else: support@papertotal.com
Post: Kimeur Labs, LLC, 4848 Lemmon Ave STE 420, Dallas, TX 75219