Your documents are
your business.
This policy describes how the PaperShift starter application handles documents and basic technical information. Update it to reflect your actual hosting, analytics, and business practices before launching publicly.
1. Documents you upload
When you use the converter, the PDF you select is sent to the server so the service can create a DOCX. In this implementation, the application reads the uploaded file into memory and does not intentionally save it to a permanent upload folder or application database. The generated document is returned in the response.
2. Temporary processing and infrastructure
Although the application is designed for in-memory processing, no web service can make a universal guarantee about every layer of its deployment. Your hosting provider, reverse proxy, security tooling, or platform may process technical logs or temporary buffers. Configure those systems carefully, restrict access, and avoid logging file contents or sensitive filenames.
3. Information in logs
The application logs operational events and may include standard server metadata depending on your deployment. Do not add analytics, session replay, or request-body logging without reviewing the privacy impact. If you enable analytics or error tracking, disclose the provider, data collected, retention period, and opt-out choices here.
4. Cookies and local storage
The default interface does not require an account and does not intentionally set tracking cookies or use local storage. Your hosting platform or any future third-party integration may behave differently; review all dependencies before launch.
5. Security
PaperShift validates the PDF signature, applies configurable size and page limits, and returns the generated file as a download. These measures reduce some common risks but do not eliminate every vulnerability. Keep dependencies updated, deploy behind HTTPS, configure rate limits and timeouts, and monitor for abuse.
6. Your responsibilities
Only upload documents you are authorised to process. If you handle personal data, confidential business information, or regulated content, confirm that your use complies with applicable laws, contracts, and organisational rules. Do not upload documents containing sensitive information unless your risk assessment permits it.
7. Children
PaperShift is a general document utility and is not designed to collect personal information from children. If you believe a child has submitted personal information through the service, contact the operator so the issue can be assessed.
8. Changes to this policy
This policy may change as the service evolves. A production operator should update the revision date and notify users of material changes where required by law.
9. Contact
For privacy questions, contact the developer through epsingh.in. Replace this contact route with a monitored business address before launching a commercial service.
Deployment note: this is a starter policy template, not legal advice. Have it reviewed for your jurisdiction and actual data practices.