Privacy Policy
Running a Docs Score, in one paragraph. When you press the button on /score, you are asking us to fetch and read the public pages at the URL you give us, and you are giving us your email address so we can send you the report. We store that submission, the report, and your IP address (to stop the tool being abused). We may email you the report and follow up once or twice about it. Nothing more. You can ask us to delete all of it at any time through our contact form. The rest of this page is the detail behind that.
Paperkraft ("we," "us," or "our") makes an AI technical writer for SaaS and API teams, offers documentation services, and operates this website, the Docs Score diagnostic tool, the beta sign-up, the contact form and our scheduling page (together, the "Services"). This policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
We collect information in three ways: what you give us directly, what our tools generate on your behalf, and what's collected automatically as you use the site.
| Source | What we collect |
|---|---|
| Docs Score tool | Your email address (required, so we can send you the report), your name, company name, documentation URL, product category, target audience, competitors and concerns you tell us about, and the public content at the URL you submit. We also store the generated score and report, and your IP address for rate-limiting and abuse prevention. |
| Scheduling (Calendly) | When you book a conversation, the scheduler is Calendly, embedded on our booking page. The name, email, and any details you enter go to Calendly to create the meeting and send invites, under Calendly's own privacy policy. |
| Automatically collected | IP address, browser type, device type, referring pages, and general usage patterns (pages visited, time on page), collected via standard server logs. |
| Beta sign-up | Your work email address when you ask to join the private beta, plus your IP address, browser type and the page you came from, so we can manage the waitlist and stop abuse. |
| Contact form | Your name, email address, and any company, documentation URL and message you choose to send. |
| Local storage | Whether you have already seen the short intro on our home page, so a repeat visit plays the shorter version. It is stored in your browser only and never sent to us. |
We do not knowingly collect payment card information, government ID numbers, or other sensitive personal data through these Services.
2. How we use your information
- To operate the Docs Score tool, analyzing the public documentation at the URL you submit and generating a diagnostic report
- To email you your Docs Score report, and to notify us that you requested one so we can follow up
- To schedule and prepare for conversations you book with us
- To respond to inquiries sent through our contact or booking forms
- To send you the report, calendar invite, or reply you asked for. If you request a Docs Score we may follow up once or twice by email about that report; we never add you to a marketing list or newsletter, and never sell or share your address for anyone else's advertising. Reply asking us to stop and we will.
- To rate-limit submissions and prevent spam or abuse of our forms
- To monitor, secure, and improve the Services (aggregated, non-identifying usage analysis, including Google Analytics)
- To comply with legal obligations
3. How information is shared
We do not sell your personal information. We share it only as needed to run the Services:
- AI model providers. To generate your report, the Docs Score tool sends the company details you submit and the signals our crawler observed at your documentation URL to Google (Gemini API), or to Groq if Google is unavailable. We do not send your email address or name to either. Both process the request under their own data-handling terms and are not permitted to use your submission to train models on our behalf.
- Scheduling. Booking a conversation is handled by Calendly, embedded on our booking page. The details you enter there are processed by Calendly to create and manage the meeting, under Calendly's own privacy policy.
- Analytics. We use Google Analytics on our pages; Google receives the usage data described in section 4 as our analytics provider.
- Email delivery. We use Resend to send your Docs Score report and our own notification email. Your email address, name and the contents of the report pass through Resend in order to deliver the message.
- Infrastructure & hosting. The Services run on third-party cloud hosting (e.g., Vercel). We use Supabase to store Docs Score submissions, contact messages and beta sign-ups.
- Legal. We may disclose information if required by law, or to protect the rights, safety, or property of paperkraft or others.
- Business transfers. If paperkraft is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this policy.
4. Cookies & local storage
We use minimal, functional local storage, only to remember whether you have seen the home page intro.
We also use Google Analytics to understand which pages people read and where they lose interest. It sets its own cookies and records a truncated version of your IP address, the pages you view, and general device and location information. We use it only in aggregate to improve the site. We do not use it to build advertising profiles, we run no advertising cookies or cross-site retargeting pixels, and we do not sell this data. You can opt out with Google's browser add-on, or by blocking analytics cookies in your browser or an extension; the site works normally either way.
5. Data retention
Docs Score submissions, your contact details, the URL you submitted, the generated score and report, and whether we emailed it to you, are stored so we have a record of what we sent and can follow up. We keep them no longer than 24 months. Contact and booking submissions are retained only as long as needed to respond to you and maintain our business records, typically no longer than 24 months. In all cases you can ask us to delete your data sooner, unless law requires us to keep it longer.
6. Data handling in the product and during a documentation engagement
In the product. When you connect a docs repository or a tool such as Slack, Jira, Linear or Notion, Paperkraft accesses only what that connection grants, and uses it to write and check the documentation changes you ask for. Content needed for a change may be processed by AI model providers under their own data-handling terms. Every change comes back to you as a pull request, and you can disconnect any integration at any time.
During an engagement. If you engage us to build or revamp your documentation, the data we work with is scoped to what the engagement needs, not your broader systems:
- We typically access your product documentation, marketing site content, API specs/OpenAPI schemas, and, where you grant it, read access to a docs repository so we can draft and open pull requests.
- We do not request or need access to your production databases, customer data, payment systems, or end-user personal information to write documentation.
- Any credentials or access you provide (e.g., a scoped repo token, a staging environment login) are used only for the agreed work and are not retained beyond the engagement unless you ask us to keep them for ongoing retainer work.
NDA on request. Happy to sign your NDA before any access is shared or any confidential material changes hands, just ask on the first call.
7. Your rights
Depending on where you live, you may have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Object to or restrict certain processing
- Request a copy of your data in a portable format
To exercise any of these rights, contact us through our contact form. We'll respond within a reasonable timeframe, consistent with applicable law, including the EU/UK GDPR, California's CCPA/CPRA, and India's Digital Personal Data Protection Act, 2023 (DPDP Act).
8. Data security
We use reasonable technical and organizational measures, including encryption in transit (HTTPS) and access controls, to protect information from unauthorized access, alteration, or disclosure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. International data transfers
We're based in India. Our Services and the third parties we rely on may process information in countries other than your own, including the United States and India. Where required, we rely on appropriate safeguards (such as standard contractual clauses under GDPR, or the transfer mechanisms recognized under India's DPDP Act) for such transfers.
10. Children's privacy
Our Services are intended for business use and are not directed to children under 18 (the age of consent under India's DPDP Act) or under 16 where a stricter local age applies. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
Questions about this policy or your data?
Email us at Book a call and we'll get back to you.
12. Brand & trademarks
"Paperkraft," the Paperkraft logo, and the visual identity of this site are our marks. You may reproduce them to refer to us, in press coverage, partner directories, integration listings, or a "built with" credit, provided you don't alter them, imply we endorse or sponsor you, or use them as your own. Approved logo files, colors, and usage rules live in our media kit.