1. Who handles your data
The operator of White Paper Digester controls the personal data described in this notice. Privacy, access and correction requests may be sent to beta@whitepaperdigester.com. The registered provider name and correspondence address must be added before paid launch.
2. Data we collect
- Account and admission data: email address, beta request and approval status, account identifiers, membership and authentication events.
- Sources and generated content: submitted URLs, pasted text, uploaded files and filenames, extracted text, prompts derived from your request, reports, scripts, audio, captions and public-share settings.
- Personalization and activity: profile preferences, topics, notes, queue, playback position, library state and actions you take in the service.
- Operations and security: request identifiers, timestamps, task state, usage and cost totals, error codes, limited network/device data and records needed to prevent abuse and investigate incidents.
- Billing data when payments launch: plan, invoice, payment, refund and provider reference/status data. Card details will be collected by the payment processor, not stored by this application.
3. Why we use it and whether it is required
An email address is required to request and administer beta access. A source is required only when you ask us to create a digest. Profile and personalization fields are optional; without them the service uses general defaults.
We use data to:
- authenticate users, provide and synchronize the requested service;
- process sources and generate the reports, audio and captions you request;
- operate sharing, exports, deletion, support and account recovery;
- enforce allowances, secure the service and diagnose failures;
- measure reliability and aggregate service cost; and
- comply with law, resolve disputes and maintain necessary business records.
We do not sell personal data or use it for third-party behavioural advertising.
4. Service providers and transfers
We disclose data only as needed to classes of processor that host the app, database and private files; authenticate users and deliver email; perform user-directed AI, transcript, media and compute operations; deliver content; provide payment processing when enabled; or support security and incident response. We may also disclose data where required by law or to protect users, rights and the service.
These processors may handle data outside Hong Kong or your home jurisdiction. We use access controls, scoped credentials, provider eligibility rules and contractual or other safeguards appropriate to the service. Confidential user content is routed only through commercial configurations that meet the product's no-training eligibility policy; provider operational retention can still apply.
5. Retention
- A private extracted-source preview that you do not use is queued for deletion after 30 minutes. If you create a digest, that exact preview is kept only while the generation task needs it for processing or an available retry, then queued for deletion after success, cancellation, permanent failure or dismissal.
- An original uploaded PDF is retained for retry, then deleted 1 day after a successful digest. You can delete it earlier. Abandoned uploads expire after 24 hours; canceled, dismissed and permanently failed jobs are queued for prompt cleanup.
- Extracted source text, generated output, profile and library data remain with the digest or account until you delete the relevant data or account, subject to backup, security and legal exceptions.
- Account export archives are deleted 24 hours after preparation. Individual download links expire within 15 minutes.
- An account-deletion request freezes new activity immediately. It can be canceled for 30 days, after which product content is permanently deleted.
- De-identified usage totals, deletion audit records and the minimum billing, tax, fraud or legal records may be retained where necessary. They must not contain source or generated content.
6. Cookies and device storage
We use essential authentication cookies to keep you signed in and complete secure email-code flows. The app also uses browser local storage for device preferences and playback state, such as theme, queue, filters, caption choices, current episode and progress before synchronization.
At the date above, the customer app does not use advertising cookies or third-party analytics cookies. Because current cookies and storage are needed for sign-in or features you request, there is no marketing-cookie consent banner. Blocking essential storage can prevent sign-in, offline continuity or saved preferences. This notice will change before non-essential tracking is introduced.
7. Your choices and rights
You may update profile data, revoke public shares, delete retained originals and, where enabled, export or request deletion of your account. You may also ask us to provide access to or correct personal data, explain our handling, or address a privacy complaint. We verify identity before acting on a request.
Rights vary by location and may be subject to legal exceptions. Contact beta@whitepaperdigester.com from your account email where possible.
8. Security, children and changes
We use access controls, account-scoped storage, encryption in transit, private object storage, short-lived media links, audit records and environment-scoped credentials. No system is completely secure, so report suspected compromise promptly and do not share sign-in codes or public-share links unintentionally.
The service is not directed to children and beta accounts require users to be at least 18. We may update this notice as the service and provider set changes; the updated date will appear above and material changes will be communicated where practicable.