This privacy policy informs you in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of your personal data when using PaperSweep.
The controller responsible for data processing on this website is:
When you upload a PDF file for processing, the file is temporarily stored on our server. The content of the file (pages rendered as images) is transmitted to Mistral AI for text recognition (OCR) and classification. No personal information from the document is extracted, stored, or linked to any identity by PaperSweep.
Retention: The uploaded file and all derived files (split PDFs, Excel log) are automatically deleted within two (2) hours of processing completion. After a ZIP archive download, deletion is accelerated to thirty (30) minutes.
To provide a free usage allowance without requiring an account, PaperSweep stores a randomly generated identifier (UUID) in your browser's localStorage under the key ps_visitor. This identifier is used solely to track how many megabytes you have processed against your free allowance. It contains no personal information and is not shared with any third party.
If you clear your browser's localStorage, a new identifier is created. Your previous usage record remains in our database linked only to your IP address, so the free allowance cannot be trivially reset by clearing localStorage.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest) — the interest being the equitable allocation of the free tier and prevention of abuse.
Retention: The visitor record (identifier + cumulative bytes processed) is retained indefinitely to prevent free-tier circumvention. Only the byte total is stored — no document content, no behavioural data.
To prevent abuse of the free tier, we also track cumulative upload volume per IP address. The IP address is stored in hashed or plain form in our database, linked only to the number of bytes processed. It is not associated with any other personal data.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing systematic abuse of a free service).
Retention: IP usage records are retained indefinitely for the same reason as visitor records.
If you purchase credits, the payment is processed by Stripe (see section 4.2). We store the following on our servers:
The legal basis is Art. 6(1)(b) GDPR (contract performance) for crediting your account, and Art. 6(1)(c) GDPR (legal obligation) for retaining payment records under commercial and tax law.
Retention: Payment records are retained for the period required by applicable accounting law (typically 10 years in Germany/Austria).
Our hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. This includes:
This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating a secure and functional website). Retention period: 30 days.
PaperSweep does not set any HTTP cookies. No tracking, analytics, or advertising cookies are used. No third-party tracking scripts are loaded.
We use the browser's localStorage API to store your language preference (ps_lang) and your visitor identifier (ps_visitor, described in section 2.2). localStorage is not transmitted automatically with each request (unlike cookies) and is scoped to your browser on this domain only.
| Data | Purpose | Legal basis |
|---|---|---|
| Uploaded PDF / results | Providing the document sorting service | Art. 6(1)(b) GDPR |
| Visitor ID (localStorage) | Free-tier allocation, abuse prevention | Art. 6(1)(f) GDPR |
| IP address (byte total) | Free-tier abuse prevention | Art. 6(1)(f) GDPR |
| Payment records | Credit fulfilment; legal accounting obligation | Art. 6(1)(b) + (c) GDPR |
| Server logs | IT security and service continuity | Art. 6(1)(f) GDPR |
To perform OCR and document classification, we transmit page images (as PNG files) to Mistral AI SE, 15 rue des Halles, 75001 Paris, France.
No other third parties receive your data. We do not sell, share, or use your documents for advertising or AI model training.
If you purchase credits, the transaction is handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
PaperSweep never receives or stores your card number, CVV, or full payment card data.
The website is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. As our hosting provider, OVH processes server log data on our behalf. A data processing agreement is in place.
All processing takes place within the European Union. Mistral AI operates EU-based infrastructure. No data is transferred to third countries (outside the EU/EEA).
Under the GDPR, you have the following rights regarding your personal data:
To exercise your rights, contact us at: info@aleancore.com
Note: because PaperSweep does not require user accounts, we cannot link a visitor ID or IP address to a named individual without additional information you provide. To exercise your rights regarding credit-system records, please contact us and include your visitor ID (found in your browser's localStorage under the key ps_visitor) and/or your IP address.
You have the right to lodge a complaint with a supervisory authority. The competent authority depends on your place of residence or the location of the alleged infringement. For our company, the competent authority is:
All data transmissions between your browser, our server, and Mistral AI use TLS encryption (HTTPS). Uploaded files are stored in a job-specific directory accessible only to the processing service, not publicly accessible via the web.
We reserve the right to update this privacy policy to reflect changes in the service or applicable law. The current version is always available at this URL. We recommend reviewing this page periodically.