Your privacy is critically important to us. At Paperpile we have a few fundamental principles:
First published on 3/28/2013. Updated on 01/11/2014.
Paperpile LLC operates the website paperpile.com. It is Paperpile's policy to respect your privacy regarding any information we may collect while operating our websites and services.
Like most website operators, Paperpile collects non-personally-identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor's request. Paperpile's purpose in collecting non-personally identifying information is to better understand how Paperpile' visitors use our website. From time to time, Paperpile may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of our Service and websites.
Paperpile also collects potentially personally-identifying information like Internet Protocol (IP) addresses. However, Paperpile does not use such information to identify its visitors and does not disclose such information, other than under the same circumstances that it uses and discloses personally-identifying information, as described below.
Your Paperpile content (references, notes, files etc.) is not shared with Google Analytics, Mixpanel or Intercom.
Certain visitors to Paperpile's websites choose to interact with Paperpile in ways that require Paperpile to gather personally-identifying information. The amount and type of information that Paperpile gathers depends on the nature of the interaction. For example, we ask visitors who sign up for an account at Paperpile to provide a username and email address (directly or via their Google account, see below). Those who engage in financial transactions with Paperpile are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, Paperpile collects such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor's interaction with Paperpile. Paperpile does not disclose personally-identifying information other than as described below. Visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
The sign-in process to Paperpile is handled through the visitor's Google account. Paperpile follows the guidelines provided by Google for the secure OAuth 2.0 authentication and authorization protocol. At not time Paperpile has access or stores any passwords associated with the Google account. If a visitor chooses to sign-in to Paperpile via a Google account, the visitor will be asked explicitly to grant permission to access certain information and services associated with this Google account. The visitor can review the permissions and deny access at this point. In addition, the visitor can revoke the access at any later point here: https://www.google.com/settings/account. Paperpile only asks for information or services required to run the Paperpile service and only has access to information the user has explicitly granted access to. Notably, Paperpile does not have - at any time - read or write access to the visitor's e-mail data in Gmail or any data stored in Google Drive except files that have been uploaded to Google Drive by the user via the Paperpile service. You can optionally import your contacts from Gmail into Paperpile. The sole purpose of this function is to make it easier for you to send papers by email to your contacts or invite your contacts to shared folders. Paperpile stores your contact list only locally on your computer. Your contact list is never sent to Paperpile's servers or stored there. Paperpile will never send emails to your contacts unless explicitly initiated by you when you share papers with the email function or invite your contacts to a shared folder.
Paperpile provides downloadable software that can be installed in the visitor's web-browser ("Chrome Extension"). The main purpose of the Chrome extension is to enable advanced functionality on third party sites such as PubMed or Google Scholar. The Chrome Extension accesses third party sites with the purpose to search for scientific documents or reference data. No other data is accessed or transmitted to the Paperpile's servers.
The Google Docs plugin allows the users of Paperpile to format citations and bibliographies in their Google Documents. For that purpose it uses a so-called "Apps Script", a small program that runs on Google's servers. The Apps Script has access to the content of the Google Document. However, it does not transmit any content to the Paperpile servers beyond what is technically necessary. At the moment only the name of the document and the list of citations are transmitted to the Paperpile servers.
The Apps Script needs to be authorized separately from the user's Paperpile account and if the user chooses not to authorize the Apps Script the Paperpile Service remains fully functional with the exception of the functions of the Google Docs plugin. More information on Apps Scripts is available here. No other component of the Paperpile Service has access to the content of the user's Google Documents.
Paperpile may collect statistics about the behavior of visitors to its websites. For instance, Paperpile may monitor the most popular public Content on the Paperpile Service or use usage statistics to measure how our user base grows. Paperpile may display this aggregated, non-personalized information publicly or provide it to third parties. However, Paperpile does not disclose personally-identifying information other than as described below.
With "Personal Information" we understand potentially personally-identifying, information and Content which you created and that you stored on our Service.
Paperpile has employees who work on the Service and works with contractors who improve or maintain parts of the Service. For example, the server hardware running the Service is provided by a contractor.
Paperpile discloses Personal Information only to those of its employees and contractors that (i) need to know that information in order to process it on Paperpile's behalf or to provide additional features available through Paperpile's Service, and (ii) that have agreed not to disclose it to third parties.
Some of those employees and contractors may be located outside of your home country; by using Paperpile's Service, you consent to the transfer of such information to them. Paperpile will not rent or sell potentially personally-identifying and personally-identifying information to any third party. Other than to its employees, contractors and affiliated organizations, as described above, Paperpile discloses potentially personally-identifying and personally-identifying information only when required to do so by law, or when Paperpile believes in good faith that disclosure is reasonably necessary to protect the property or rights of Paperpile, third parties or the public at large. If you are a registered user of a Paperpile Service and have supplied your email address, you explicitly agree that Paperpile may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what's going on with Paperpile and our Products. We primarily use our various product blogs to communicate this type of information, so we expect to keep this type of email to a minimum. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. Paperpile takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.
We would like to protect shared Content the same way as personal Content is protected. As we cannot control what the recipients of your shared Content do with the Content, this is not possible. From our side, we restrict access to shared Content the same way we restrict your Personal Information.
We are continually optimizing and improving the Service for you. To analyze the data, we are using our own software and software of third parties.
To improve the software and to gain scientific insight, anonymous statistical information will be passed on to third parties, especially to providers of software which we use. This statistical information is not "Personal Information" under above definition; especially it is not potentially personally-identifying and does not include your Content or parts thereof.