Privacy Policy
Last Updated: August 25, 2026 · Effective Date: August 25, 2026
This Privacy Policy describes how Paperbound (a client software system architected, licensed, and maintained by Ben Tran Digital, accessible at bentrandigital.com) handles information, respects user privacy, and upholds strict client data sovereignty.
1. Local-First Privacy Architecture & Client Data Sovereignty
Paperbound operates on a local-first architectural paradigm. Unlike commercial cloud-based proposal software (such as PandaDoc or DocuSign), Paperbound does not operate centralized database servers, does not index customer proposal records, and retains zero access to your pricing catalogs, client contracts, or digital signatures.
- Local Storage (IndexedDB): Primary proposal records, line items, and customer details reside strictly inside your local device browser storage.
- Zero Telemetry & Tracking: Paperbound contains no third-party tracking pixels, advertising scripts, or behavior-tracking cookies.
2. Google API Services User Data Policy & Limited Use Disclosure
Paperbound's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you optionally connect your Google Drive account, Paperbound requests exclusively the non-sensitive https://www.googleapis.com/auth/drive.file OAuth scope.
- Strict Per-File Isolation: Paperbound only has permission to create, view, edit, and save files that it creates itself (such as finalized PDF agreements and database snapshots in your designated
/Paperbound/Signed/folder). - Zero Access to Existing Files: Paperbound cannot view, search, modify, access, or delete any other files, spreadsheets, emails, or personal documents in your Google Drive.
- No AI Training or Third-Party Sharing: Google user data is never transferred to third parties, never sold, and never used to train generalized machine learning or artificial intelligence models.
3. Dropbox, Microsoft OneDrive & Box Cloud Integrations
If you connect Dropbox, Microsoft OneDrive, or Box, Paperbound requests scoped app-folder permissions to upload executed contract PDFs and system backup archives directly to your personal or company cloud drive. OAuth access tokens are stored strictly on your local device (localStorage) and are never transmitted to Ben Tran Digital servers.
4. Cryptographic E-Signatures & Audit Digests
When a customer executes a digital signature in Paperbound, the Web Cryptography API (crypto.subtle) generates an unalterable SHA-256 audit digest combining the signer's name, email address, exact UTC timestamp, and vector ink data. This audit digest is embedded permanently into the compiled PDF to ensure legal compliance and tamper resistance.
5. Ephemeral Edge Sync & Device Pairing
When syncing workspace data between team devices or staging remote signature capability links, encrypted data payloads are stored temporarily on Cloudflare Workers KV with an automated 48-hour Time-to-Live (TTL) expiration. If a device pairing channel is revoked by an Admin Hub, remote wipe signals permanently purge local data from the targeted field unit.
6. Contact & Data Governance Inquiries
If you have questions regarding this Privacy Policy, your data sovereignty, or Google OAuth integration, please contact:
Ben Tran Digital
Principal Software Engineer & Digital Architect
Email: info@bentrandigital.com
Website: https://bentrandigital.com