We believe privacy is a right, not a checkbox. This policy explains exactly what data we collect, why we collect it, and how we protect it.
Perch Works ("we", "our", "us") is a product studio registered in India. We build and operate the following products, each covered by this Privacy Policy:
This policy applies to all users of these products and to visitors of our website at paperperch.com. The data controller for all personal data is Perch Works.
If you have questions about this policy, please contact us at privacy@paperperch.com.
We collect the minimum data necessary to provide our services. Below is a complete overview of what we collect and why.
When you create an account, we collect:
We collect anonymised, aggregated usage data to understand how features are used and to improve our products. This data cannot be linked back to an individual user. It includes:
If you contact us via email or our contact form, we retain that correspondence to respond to your inquiry and to improve our support.
| Data type | Collected? | Purpose |
|---|---|---|
| Phone number | Yes | Authentication, account recovery |
| Display name | Yes | Shown within your circles |
| Device model / OS | Yes | Compatibility, crash reports |
| Anonymised usage events | Yes | Product improvement (no PII) |
| Email address | Only if you contact us | Support correspondence |
| Real name | No | — |
| Government ID | No | — |
| Payment data | No — handled by app store | Apple / Google process payments |
| Advertising IDs | Never | We have no ad model |
We use personal data only for the purposes it was collected for. Specifically:
Paperperch handles order, delivery, and checkout data so we can pack and deliver disposables to your PIN. Here is exactly what is collected and how it is treated.
When you place an order on the app or website, we collect what is needed to fulfil it:
We use the PIN and address you provide to confirm we deliver to your area and to assign the order to a hub. We do not track your location in the background.
Web checkout uses cash on delivery. The mobile app may offer online payment where enabled. We do not collect card or UPI details on the website. App-store or payment-provider processors handle online payments.
WISSEN stores your saved links, videos, articles, and knowledge space content. Here is exactly what is collected and how it is handled.
Content you save to a knowledge space is handled as follows:
Notes and AI-generated summaries you create within a knowledge space are stored encrypted on our servers, accessible only to you and circle members you explicitly invite. AI summaries are generated server-side and cached — the underlying source URL and metadata are stored, but third-party media is never downloaded or hosted by us.
When you share a knowledge space with another user, access is governed by application-layer permissions you set (view or edit). Shared access can be revoked at any time. Revoking access removes the recipient's ability to view the space but does not delete any content from your own account.
We do not sell, rent, or trade your personal data. The following is an exhaustive list of when your data may be shared with a third party:
We use the following sub-processors to operate our infrastructure. They process data on our behalf, under our instructions, and are contractually prohibited from using your data for any other purpose:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, storage, compute, encryption (KMS) | India / Singapore regions |
| Google Firebase | Push notifications (FCM) — notification token only, no content | USA |
| Apple APNs | Push notifications on iOS — notification token only, no content | USA |
| OpenAI | AI features — anonymised, non-personal inputs only. No user files or messages are sent. | USA |
We may disclose data if required to do so by applicable law, a valid court order, or a legitimate government authority. We will notify you of any such request where legally permitted, and we will challenge requests we believe are overbroad.
If Perch Works is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you before any such transfer and will ensure the same privacy protections apply.
We keep your data only as long as necessary to provide the service or as required by law.
| Data type | Retention period |
|---|---|
| Account information | Until account deletion + 30 days (recovery window) |
| Delivery address & cart | Until account deletion, or until you clear saved checkout fields |
| Orders & invoices | Retained as required for tax, audit, and legal records |
| Active subscriptions | Until cancelled or account deletion |
| Partner QR attribution | Up to 30 days in the browser |
| Knowledge spaces & saved content | Until user deletes them or closes account |
| AI summaries & notes | Until user deletes them or closes account |
| Anonymised usage events | 24 months (aggregated, non-personal) |
| Support correspondence | 2 years from last contact |
| Crash and error logs | 90 days |
When an account is deleted, all associated personal data is permanently removed from our live systems within 30 days and from backups within 90 days.
We apply industry-standard and beyond-standard security measures to protect your data:
Despite our best efforts, no system is completely immune to security incidents. If we become aware of a breach that affects your data, we will notify you promptly in accordance with applicable law.
You have the following rights with respect to your personal data. To exercise any of them, contact us at privacy@paperperch.com or use the in-app account settings where available.
We will respond to all rights requests within 30 days. We may ask you to verify your identity before fulfilling a request.
You can delete your account at any time from the app's settings screen. Account deletion is permanent — all your data is removed from our live systems within 30 days and from backups within 90 days. This action cannot be undone.
Our products are not directed at children under the age of 13, and we do not knowingly collect personal data from children under 13.
Paperperch is a shopping service. If an adult places an order that includes household supplies used by a family, the account holder is responsible for the order and for any minor's involvement.
If you believe a child under 13 has provided us with personal data without appropriate consent, please contact us at privacy@paperperch.com and we will promptly delete it.
We may update this Privacy Policy from time to time. When we do:
We encourage you to review this policy periodically. The current version is always available at paperperch.com/privacy-policy.html.
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out:
We aim to respond to all privacy-related enquiries within 5 business days.
Our team is happy to walk you through anything in this policy or explain how your specific data is handled.