Privacy Policy

Effective date: 10 June 2026

ITBASS CONSULTING, SLU (“we”, “us”, “our”, “Papertriage by ITBASS Labs”) respects your privacy. This policy explains what data we handle and how.

1. Who we are

ITBASS CONSULTING, SLU — an Andorran Societat Limitada Unipersonal; data controller.
[YOUR REGISTERED ADDRESS], Andorra
Contact: privacy@papertriage.com

2. Products covered

This policy covers:

• The Papertriage desktop application (Windows, macOS) — sold via papertriage.com
• The Papertriage mobile application (Android, distributed via Google Play) — also listed in stores as “PDF Document Organizer”

The mobile and desktop applications are separate products with separate licenses.

3. What Papertriage does with your files

Papertriage helps you organize files on your own device. The application reads file names, file types, file sizes, and, for some file types, text content extracted on your device, to suggest renames and folder placements.

By default — both on desktop and mobile — Papertriage runs an AI model locally on your device. Your file contents are not transmitted to us or to any third party in this mode.

4. Optional cloud AI (“Mode B”)

You may optionally enable a cloud AI mode using a provider you choose, such as Anthropic (Claude), OpenAI, or Google (Gemini), depending on what is available in your version of the app. Mode B is opt-in and disabled by default. When you enable it, the application clearly indicates that file content will be sent off-device for that session.

When Mode B is enabled, selected file content is sent from your device directly to your chosen provider under that provider’s terms and privacy policy, using your own API key. We do not see or store this content, and it does not pass through any server we operate.

5. Enterprise managed cleanup (“Mode C”) — in waitlist

We are developing a managed cleanup service for archives of 10,000+ documents, processed on a private AI deployment operated by ITBASS CONSULTING. No third-party cloud is involved and no content leaves infrastructure we control. This service is not generally available yet. If offered, it will be a separate engagement with its own data processing agreement; signup today captures interest only.

6. License and account data (desktop only)

When you purchase a Papertriage desktop license, our payment processor Paddle handles the purchase. Paddle acts as the merchant of record. Paddle may provide us with limited licensing records such as license code, tier, license status, purchase and renewal dates, customer email, and machine activation count. We use this only for license validation, support, refunds, accounting, and legal compliance.

We do not receive: your name (beyond what you choose to share), full billing address, payment card details, or any usage analytics from the desktop app.

For the mobile application, purchases (where applicable, such as the one-time unlock) are handled by Google Play. We do not receive your Google account information; Google’s own privacy policy governs the payment flow.

Paddle’s own privacy policy covers what data Paddle collects during the desktop payment process.

7. Website and infrastructure data

The papertriage.com website is hosted on managed WordPress infrastructure. We do not use IP addresses to track product usage. Our website host, payment provider, email forwarding service, and update/download infrastructure may process IP addresses, User-Agent strings, and request timestamps as part of normal service operation. We do not run cross-site tracking pixels or advertising trackers. If we add analytics in the future, this policy will be updated and you will be informed.

8. Email contact

If you email us at support@papertriage.com, refunds@papertriage.com, or any related address, we store the content of your email in order to respond. If you choose to send us diagnostic logs or support attachments, we receive whatever you include — the app does not send diagnostic logs automatically. We do not use email content for marketing. Support tickets are deleted after 24 months.

9. Your rights

If you are in the EU, UK, EEA, or any jurisdiction granting equivalent rights, you may request:

• access to the personal data we hold about you;
• correction of inaccurate data;
• deletion of your data, subject to our retention obligations below;
• a copy of your data in portable form;
• to object to or restrict processing.

Email privacy@papertriage.com. We respond within 30 days.

Because the desktop and mobile applications do not transmit your file content to us, the personal data we hold is limited to: (a) the license-related information Paddle shares with us for desktop purchases, and (b) any emails you send us.

EU and EEA residents may also lodge a complaint with the Andorran Data Protection Authority (Agència Andorrana de Protecció de Dades, apda.ad) or with their national supervisory authority.

10. Lawful basis (GDPR)

• License records (desktop): processed under contract performance (GDPR Art. 6(1)(b)) — necessary to provide and validate your license.
• Support emails: processed under legitimate interest (GDPR Art. 6(1)(f)) — responding to your inquiries.

11. Data retention

• License records: retained while your license is active plus 5 years thereafter, for accounting and tax compliance under Andorran law.
• Support emails: deleted after 24 months.
• Website server logs: rotated per hosting defaults (typically 30 days).

12. Children

Papertriage is not directed at children under 13 and we do not knowingly process data about them.

13. International transfers

We are established in Andorra. The European Commission has issued an adequacy decision recognising Andorra as providing an adequate level of data protection (Decision 2010/625/EU), so transfers of personal data from the European Economic Area to us do not require additional safeguards.

Paddle, Google, and the cloud AI provider you choose under Mode B operate internationally; their respective privacy policies govern any further transfer arising from the payment, app store, or Mode B flows.

14. CCPA (California residents)

ITBASS CONSULTING, SLU does not sell or share personal information as those terms are defined under the California Consumer Privacy Act. California residents may exercise CCPA rights by emailing privacy@papertriage.com.

15. Changes

We will update this policy as our products evolve. Material changes will be announced on the Site and, where reasonable, via in-app notification.

16. Contact

ITBASS CONSULTING, SLU
[YOUR REGISTERED ADDRESS], Andorra
privacy@papertriage.com