Privacy Policy

Who we are

PaperChase Labs is the product arm of PaperChaseWebb Inc., based in Honolulu, Hawaii, United States. Labs ships productized operator tools — including PaperScrape, PaperClip, Operator Dashboard, doctrine, and related public surfaces — on a local-first, sovereign architecture. This policy explains how we collect, use, and protect information when you visit paperchaselabs.com or buy a Labs product. House practice and client installs are covered on paperchasewebb.com and paperchaseconsulting.com.

What we collect

Information you give us directly: name, email, business name, job title, phone number, and the contents of enquiries, proposals, and agreements.
Information collected automatically: IP address, browser and device type, and website usage analytics.
Business data you connect to our services: when we install or operate systems for you, we may process the data and accounts you grant us access to, strictly to deliver the engagement.

How we use your data

We process information to: provide, deliver, and improve our services; communicate with you about your account, enquiries, and engagements; analyze usage; prevent fraud and abuse; and comply with legal obligations. Our legal bases are your consent, contractual necessity, and our legitimate interests in operating and improving the business.

Local-first processing (our difference)

Unlike all-cloud platforms, much of our stack runs on local or client-controlled hardware using local AI models. Where an engagement is configured to run locally or air-gapped, your business data can stay within your own environment and is not sent to third-party cloud AI providers. We tell you, per engagement, which lanes are local and which (if any) use cloud providers.

AI and third-party services (sub-processors)

Where cloud AI is used, our platform may route requests to third-party model providers including Anthropic, OpenAI, and Google. We also use providers for cloud hosting, payment processing, and analytics as needed to operate. Data handled by these providers is subject to their respective terms and our data-processing arrangements with them. We do not sell your personal information.

Data sharing and international transfers

We share data only with the service providers described above, and where required by law. Data may be processed in the United States and in regions where our service providers operate data centers. Where we transfer personal data internationally, we rely on appropriate safeguards as required by applicable law.

Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, to withdraw consent, and to opt out of marketing communications. We aim to honor requests under GDPR, UK GDPR, CCPA/CPRA, and applicable Canadian privacy law. To exercise any right, contact us using the details below.

Data retention

We retain personal data for as long as needed to provide the services, maintain business and tax records, resolve disputes, and comply with legal obligations, after which it is deleted or anonymized. Business data processed during an engagement is retained or returned per the applicable agreement.

Security

We use reasonable, industry-aligned measures to protect data, including:

encryption of data in transit and, where applicable, at rest;
credentials stored in OS keychains or environment variables, never hardcoded in source;
role-based access controls and least-privilege access;
local-first / on-device processing that reduces third-party exposure;
regular backups of operational systems.

No method of transmission or storage is fully secure, and we cannot guarantee absolute security. We do not currently hold a third-party security certification (such as SOC 2); we will update this policy if that changes.

Children's privacy

Our services are intended for businesses and are not directed to individuals under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or a notice on our website.

Contact

Privacy enquiries: [email protected]. PaperChaseWebb Inc., Honolulu, Hawaii, United States — mailing address available on request.