1. Scope and contact
This draft applies to the PasteToType website, account experience, and related services operated by [legal entity name]. Before publication, counsel should complete the legal entity, registered address, effective date, privacy contact, and jurisdiction-specific disclosures.
2. Information connected to an account
When a person creates or uses an account, PasteToType may process account identifiers and profile information made available through the sign-in method, such as a name, email address, authentication identifier, account preferences, and account activity necessary to provide the service.
3. Free activation and optional product updates
Free activation is designed as an explicit email-verification flow, not a paid subscription or ordinary-work account. To service that request, PasteToType may retain the email address, a one-way lookup value, a time-limited verification challenge, minimal delivery status, and an activation audit record. PasteToType does not intend to retain the raw verification token. Product-update consent is optional, separately captured with a consent version, and is not required to activate Free. If a person elects to receive updates, PasteToType may share the email and the consent scope with the email provider solely to manage those updates. Withdrawal and deletion requests are intended to be sent to that provider before corresponding local records are removed where feasible.
4. Text and saved content boundaries
PasteToType distinguishes between recent local history and intentionally saved Pinned Pastes. The product design treats Free ordinary capture, insert, settings, and recent history as local to the relevant browser after activation. A Pinned Paste is an intentional save and, when the relevant storage feature is enabled, may be stored with associated metadata for the account that saved it. The exact storage, encryption, retention, export, and deletion mechanics must be confirmed in the final policy before publication.
5. SmartClean and authorized processing
SmartClean is designed for customer-authorized preparation requests. The service should not begin cloud processing merely because text exists in a client. Where SmartClean is offered, the final policy will identify the data categories involved, processing location, service providers, retention period, user controls, and any applicable cross-border transfer information.
6. Billing and payment providers
Payments are processed through Stripe. PasteToType stores the minimum provider identifiers and business records needed to associate an account with its subscription, purchase, entitlement, or fulfillment status. PasteToType does not intend to store full card numbers, CVV values, or payment-method secrets. Stripe’s own privacy documentation governs Stripe’s independent processing.
7. Affiliate referrals
If the affiliate program is activated, referral attribution may involve an affiliate platform and limited referral identifiers needed to determine a qualifying core subscription. Credit Packs and storage add-ons are not intended to be commissionable. The final policy will identify the affiliate provider and its applicable notice before activation.
8. Service providers and disclosures
PasteToType may use service providers for hosting, managed storage, authentication, payments, operational monitoring, activated email delivery, and other functions required to operate the service. Information may be disclosed when reasonably necessary to provide the service, comply with applicable law, protect rights and safety, or support a corporate transaction, subject to the final policy and applicable law.
9. Security, retention, and requests
PasteToType is designed to apply reasonable technical and organizational safeguards appropriate to the service. No online system can promise absolute security. Retention depends on the account feature, legal obligation, operational need, and user request. The final policy will describe the available access, correction, deletion, portability, and objection rights, including contact details and response procedures.
10. Changes
Material privacy changes should be communicated through an appropriate account or website notice before taking effect where required. The final policy will include an effective date and version history.