Privacy Policy

Introduction

PaperX is a local-first question-bank and exam tool: your library files live on your own disk, and every cloud capability is optional. This policy describes the actual data flows; the full technical details are available in the desktop app under "Help → Privacy".

What we collect

By data processor:

• Account information (provided by you): email address or third-party identity (Google / GitHub / WeChat), managed by our self-hosted Logto (auth.paperx.cloud).
• Licensing and devices: signing in activates your license and binds a device fingerprint (api.paperx.cloud, for anti-piracy). The desktop app is currently free (¥0).
• AI call logs: while signed in, the full prompt and model response of every AI call is uploaded to the PaperX server for administrator audit (fixed on with the global AI consent since 2026-09-10, no separate toggle; not uploaded when signed out; includes local / self-hosted providers).
• Optional (off by default or asked on first use): anonymous usage telemetry (PostHog, US; not consented by default, can be disabled anytime) and crash reports (Sentry, US; off by default, asked on first crash).
• Official cloud sync (on by default in the desktop app, can be disabled anytime): library content is stored in plain text on PaperX cloud (sync.paperx.cloud) for search, deduplication and exam composition; media files upload directly to Tencent Cloud COS via signed URLs. The library files themselves always stay on your disk, editable with any editor.

How we use information

The information we collect is used only to:

• Provide and maintain accounts, license activation and administrator audit
• Improve the product (anonymous telemetry and crash reports only, disableable anytime)
• Send service-related notifications
• Protect account and service security (anti-abuse, anti-piracy)

Protection and storage location

All traffic uses HTTPS; your AI / OCR / sync keys live only in your local keychain and are never uploaded; database access is restricted and audited. Our self-hosted services (Logto, licensing API, cloud sync) run in Hong Kong, China; PostHog and Sentry run in the United States (this constitutes our cross-border transfer disclosure). Library content is stored in plain text on the cloud side while official cloud sync is enabled; disabling sync leaves it only on your device.

Your rights

You may access, correct and delete your personal information, and may delete your account or export your account data: request via "Data & Privacy" in the account portal or email support@paperx.cloud; we respond within 30 business days. Anonymous telemetry and official cloud sync can be disabled anytime in settings.