Privacy Policy

1. Introduction

Paramiq ("we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our platform at paramiq.app ("Service").

2. Data We Collect

Account data: Name, email address, and authentication credentials when you register.

Usage data: Configurations, parameters, formulas, materials, and calculations you create within the Service.

Technical data: IP address, browser type, device information, and access logs for security and performance purposes.

Billing data: Payment information is processed by Paddle (our Merchant of Record) and is not stored on our servers.

3. How We Use Your Data

• To provide and maintain the Service
• To authenticate your identity and manage your account
• To process AI-assisted features (formulas, configurations, chat)
• To send transactional emails (invitations, billing notifications)
• To monitor and improve Service performance and security

4. AI Data Processing

When you use AI features, the data needed for your request is sent to OpenAI for processing. We disable response storage in our API requests. API data is not used for model training by default; provider security logs and prompt-cache retention follow OpenAI's data policies. We send only the context required to fulfill your request.

5. Data Storage and Security

Your data is stored in PostgreSQL databases hosted by Supabase (EU region). Files are stored in Cloudflare R2 object storage. All data is encrypted in transit (TLS) and at rest. We implement application-level access controls to ensure multi-tenant data isolation.

6. Third-Party Services

We use the following third-party services:

• Vercel — hosting and CDN
• Vercel Analytics / Speed Insights — privacy-focused product analytics and performance monitoring
• Supabase — database hosting
• Cloudflare R2 — file storage
• Paddle — payment processing (Merchant of Record)
• Resend — transactional email delivery
• OpenAI — AI processing
• Google Analytics — optional usage analytics when enabled with consent
• Upstash — rate limiting

7. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — export your data in a machine-readable format
• Restriction — restrict processing of your data
• Objection — object to processing based on legitimate interests

To exercise these rights, contact [email protected]. We will respond within 30 days.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all personal data and configurations are permanently deleted within 30 days. Anonymized usage statistics may be retained for analytics.

9. Cookies

We use essential cookies for security and core product functionality. Where required by law, optional analytics storage is enabled only after explicit consent.

• Session cookie — authentication (httpOnly, secure, sameSite=lax)
• CSRF token — security protection
• Theme preference — stored in localStorage (not a cookie)
• Locale preference — stored in cookie for i18n
• Analytics consent preference — stored locally so we can respect your tracking choice

The product app does not use advertising cookies. Our dedicated advertising landing pages may use Google Ads and Google Analytics cookies for conversion measurement; under Google Consent Mode these are denied by default and only set after you accept, and you can change or withdraw that choice at any time via “Cookie settings” on those pages. Analytics storage is disabled by default in regions where consent is required and only enabled after consent.

10. Children

The Service is not intended for users under 16 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 30 days before they take effect.

12. Contact

For privacy-related questions or to exercise your rights, contact us at [email protected].