Notary

Legal

Privacy Policy

Last updated: 26 May 2026. This notice explains how personal data is handled when you use Notary.

1. Data controller

Controller: Papers App Ltd. Registered in Malta with registration number C112488 and registered office at Soho The Strand, Fawwara Building, Unit S099, Triq l-Imsida, Gzira, GZR 1401, Malta.

Privacy contact: privacy@notary.eu

2. Data we collect

We process account data (name, email, auth identifiers), order details, document metadata, payment metadata, KYC session data, support messages, and operational logs.

Where required for verification, identity-related data is processed through our KYC provider according to their controlled verification flow.

3. Why we process your data

We process data to deliver the service (account access, checkout, KYC, certification, secure document download), detect abuse, comply with legal obligations, and send transactional communications.

Legal bases include contract performance, legal obligations, legitimate interests (security and fraud prevention), and consent where applicable.

4. Service providers and sharing

We share relevant data with subprocessors strictly as needed, including:

Clerk (authentication), Stripe (payments), Didit (KYC), Supabase (database), Cloudflare R2 (file storage), Resend (transactional email), and hosting/infrastructure providers.

We may also disclose data when required by law, court order, or to protect rights, security, and service integrity.

5. Retention and security

We retain data for as long as necessary for service delivery, legal compliance, dispute handling, and auditability. Retention periods vary by data category and applicable law.

We implement technical and organizational safeguards appropriate to risk, but no system is absolutely secure.

6. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, object, or port your data, and to withdraw consent where processing relies on consent.

To exercise rights, contact privacy@notary.eu. We may need to verify your identity before fulfilling requests.