Privacy Policy

PaperHammer is operated by Afterbuck Labs Inc., an Ontario corporation located at Office 703, 145½ Church Street, Unit 5, Toronto, Ontario M5B 1Y4, Canada. This policy explains how we collect, use, and protect your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

We collect only what is necessary to provide the service:

• Document content: contractor name, address, customer name, invoice details, and work description that you enter into the form. This is used exclusively to generate your document.
• Email address: collected at checkout (via Stripe) and optionally before checkout. Used to deliver your download link and, if you opted in, occasional product updates.
• Payment information: processed entirely by Stripe. We receive a customer ID and transaction confirmation; we never see or store your card number.
• Usage data: page visits, form completion steps, and download events are logged in aggregate to help us improve the product. No advertising or cross-site tracking.
• IP address: hashed (one-way) and used only for rate limiting and fraud prevention. We do not store raw IP addresses.

We use your information to:

• Generate and deliver your document
• Send your download link by email
• Process payment via Stripe
• Maintain lifetime access records if you purchased lifetime access
• Prevent abuse and rate-limit API calls
• Send transactional emails (delivery, recovery links)
• Send marketing emails only if you explicitly opted in

We do not sell, rent, or share your personal data with third parties for advertising purposes.

We use the following sub-processors:

Generated documents and session data are retained for as long as reasonably necessary to support lifetime access recovery and customer service. You may request deletion of your data at any time by contacting us at the email below. We will honor deletion requests within 30 days except where retention is required by law.

All data is transmitted over TLS. Database access is restricted to server-side processes using a service role key; no client-side code has direct database access. Download tokens are single-use with a 48-hour expiry.

Under PIPEDA and applicable provincial law, you have the right to access, correct, or request deletion of personal information we hold about you. To exercise any of these rights, contact us at the email below. We will respond within 30 days.

If you are located in the EU or UK, the legal basis for processing is contractual necessity (to deliver the service you purchased) and, where applicable, legitimate interests (fraud prevention, service improvement). You may lodge a complaint with your local supervisory authority.

If you are a California resident, you may have additional rights under the CCPA, including the right to know, delete, and opt out of sale (we do not sell personal data).

We do not use tracking cookies or third-party advertising cookies. Session state is stored in your browser’s localStorage, not in cookies. No cookie consent banner is required.

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.

We may update this policy when our practices change. The effective date above will reflect any updates. Material changes will be noted here.

Privacy questions or data requests: support@afterbuck.com.

Afterbuck Labs Inc.
Office 703, 145½ Church Street, Unit 5, Toronto, Ontario M5B 1Y4, Canada