📚 PaperStack — Privacy Policy

← Back to PaperStack

Effective Date: July 30, 2026

PaperStack is a document vault and tax readiness tool operated by ORA Systems LLC ("we," "us," or "our"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

When you create a PaperStack account or use our service, we may collect:

• Business name and email address — provided during signup
• EIN / Employer Identification Number documents — uploaded by you to your vault
• Bank statements — uploaded by you for tax readiness scoring
• Business licenses and permits — uploaded for compliance tracking
• Tax returns (prior year) — uploaded for document completeness scoring
• Receipts, payroll records, contracts, and other financial documents — uploaded by you at your discretion
• Industry and account preferences — selected by you in the app
• Usage data — pages visited, features used, AI question counts (for rate limiting)

We do not collect Social Security numbers, bank account credentials, or payment card numbers through PaperStack directly. Subscription billing is handled by Stripe under their own privacy policy.

2. How Your Data Is Stored

All uploaded documents and account data are stored on DigitalOcean infrastructure (New York, USA), encrypted at rest using AES-256 encryption. Documents in your vault are accessible only by:

• You (via your account token / login link)
• Any CPA or accountant you explicitly share your read-only CPA Share Link with
• ORA Systems LLC staff, for support purposes only

3. Data Retention

We retain your documents and account data for 7 years following your last active subscription period. This aligns with IRS recordkeeping guidelines (Publication 583) which recommend businesses retain tax records for a minimum of 3–7 years.

You may request deletion of your account and all associated data at any time (see Section 6 below).

4. How We Use Your Information

• To calculate your Tax Readiness Score and IRS Audit Risk Score
• To send onboarding emails, deadline reminders, and account notifications
• To generate your CPA Share link and Audit Package exports
• To provide AI Concierge answers about documents in your vault (no documents are sent to third-party AI providers — only document metadata is used)
• To improve PaperStack's document classification accuracy over time

5. Third Parties We Work With

• ORA Systems LLC — the operator of PaperStack; processes your data solely to provide the service
• DigitalOcean — cloud infrastructure and storage (Privacy Policy: digitalocean.com/legal/privacy-policy)
• SendGrid (Twilio) — transactional email delivery (Privacy Policy: sendgrid.com/policies/privacy)
• Stripe — subscription billing (Privacy Policy: stripe.com/privacy)

We do not sell, rent, or share your personal data or uploaded documents with any third party for advertising or marketing purposes.

United Tax Pros of Valdosta referral: When your Tax Readiness Score reaches 80 or above and you click the "File with United Tax Pros" button, we will share your score and contact information with United Tax Pros of Valdosta. This transfer is never automatic — it only occurs when you explicitly initiate it by clicking that CTA. United Tax Pros is a separate entity and not affiliated with ORA Systems LLC.

6. Your Rights — Account Deletion

You may delete your PaperStack account and all associated data at any time by:

• Using the "Delete my account and all data" button in your dashboard (under Account Management at the bottom of the page)
• Emailing us at [email protected] with the subject "Delete PaperStack Account"

Upon deletion, all uploaded documents, scores, onboarding records, and account information will be permanently removed from our systems. Document files stored on disk will be deleted immediately. Residual backup copies may persist for up to 30 days before automated purge.

7. Cookies and Analytics

PaperStack may use PostHog (self-hosted analytics) and Hotjar (session recording) to understand how users interact with the product and improve the experience. These tools do not share your data with advertising networks.

No cross-site tracking cookies are used. If you prefer not to be tracked, you can disable JavaScript in your browser or use a privacy-focused browser extension.

8. Children's Privacy

PaperStack is intended for small business owners and is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users via email when material changes are made. The effective date at the top of this page reflects the most recent update.

10. Contact

Questions about this Privacy Policy or your data?

• Email: [email protected]
• Mailing: ORA Systems LLC · Valdosta, GA