Legal
Privacy
Last updated 23 August 2026
Paperwork handles documents — invoices, memos, board papers — so the short version matters: your documents are private, they are not training data, and nothing is public unless you publish it yourself.
What we store
The content you send, as a parsed block tree; the rendered PDF; and the document’s metadata — title, template, page size, brand fields, page and word counts, and when it was made. We store your Ounie account id so the document belongs to you. We do not store the raw request beyond that tree, and we do not keep a copy of your session cookie or API key beyond verifying it.
Who can see it
You, and the small number of people who operate the service when investigating a fault you have reported. PDFs are stored in private object storage and served only through short-lived signed links minted per request — a link you shared yesterday stops working, and a link to a document you unpublish stops working immediately. Nothing is public unless you set share: true, and share pages carry a noindex directive so they do not enter search results.
What we never do
We do not train models on your documents, sell them, or share them with advertisers. There is no third-party analytics on the pages where your content appears. Paperwork has no model provider in the loop at all — pages are laid out on our own servers — so your content is not sent to anyone else in order to be typeset.
Outbound requests
The only URL Paperwork fetches on your behalf is a brand logo you supply. It must be https, it is size-capped, redirects are not followed, and hosts that resolve to private or link-local addresses are refused. Images inside your document body are never fetched.
How long we keep it
Documents created with an account are kept until you delete them or close your account; deleting a document removes the stored file too. Documents paid for with x402 have no owner, so they are removed after 30 days.
Cookies
One: the shared Ounie session cookie, which signs you in across ounie.com and its apps. There are no advertising or tracking cookies. Public pages set no cookie at all.
Your rights
You can export or delete any document from the dashboard or the API at any time. For account-level requests — export everything, delete the account — use ounie.com settings, which is the system of record for your identity, or contact us.