Privacy Policy

Last updated: March 7, 2026

PaperDrop ("we", "our", "the Service") is a Telegram bot that converts web articles into EPUB files. We are committed to protecting your privacy and being transparent about the data we handle.

1. What we collect

When you use the bot, we collect and store the following:

• Telegram user ID — a numeric identifier provided by Telegram. We do not collect your name, phone number, or profile photo.
• Conversion metadata — the URL you submitted, the timestamp of the conversion, and whether it succeeded or failed.
• Subscription status — whether you have a Free or Pro plan, and the date your subscription started or ended.

2. What we do NOT store

We want to be clear about what we do not keep:

• EPUB files — generated files are delivered to you via Telegram and then deleted from our servers. We do not retain copies.
• Article content — the text and images extracted from articles are used only during conversion and are not stored afterward.
• Telegram messages — we do not log your chat messages beyond what is needed to process your conversion request.

3. How we use your data

The data we collect is used for:

• Processing your conversion requests and enforcing usage limits.
• Managing your subscription and payment status.
• Improving the service (e.g., understanding which URLs fail to convert).
• Preventing abuse of the service.

4. Payments

Pro subscriptions are processed through Telegram Payments (powered by Stripe). We do not see or store your credit card number, billing address, or other payment details. All payment data is handled directly by Stripe in accordance with Stripe's Privacy Policy.

5. Data retention

• Conversion metadata is retained for up to 12 months, then automatically deleted.
• Telegram user ID and subscription data are retained as long as you have an active account. If you stop using the bot, your data is deleted after 24 months of inactivity.
• EPUB files are deleted immediately after delivery (typically within minutes).

6. Data sharing

We do not sell, rent, or share your personal data with third parties. The only exception is Stripe, which processes payments on our behalf.

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access your personal data — request a copy of the data we hold about you.
• Rectify inaccurate data.
• Delete your data — request that we erase all data associated with your account.
• Export your data in a machine-readable format.
• Object to data processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS/TLS), secure server infrastructure, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children.

10. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify users through the Telegram bot. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

If you have questions about this privacy policy or your data, contact us at [email protected].