Privacy and account data
This page explains the data Paper Lane uses for sign-in, your workspace and fax service.
Sign-in and your account
When you choose Google or an available Facebook sign-in option, that provider and Supabase process your sign-in. Paper Lane uses the verified account identifier and email to identify your account. Your profile name may fill your name when the account is created. Paper Lane does not receive your Google or Facebook password.
Social sign-in does not connect Google Drive, read Facebook posts or send your fax documents to Google or Facebook through the sign-in flow. Supabase may associate verified social identities with the same Supabase account. Paper Lane identifies your workspace by that account's stable identifier and does not join workspaces just because email addresses match.
Paper Lane uses a session cookie to keep you signed in and a security cookie to protect form submissions. Sign-in does not grant an agent or another application permission to use your account; any available agent connection requires separate authorization.
Documents, service and payments
Paper Lane processes documents on its server for preparation, preview and fax service. Its hosted application runs on DigitalOcean, with application records and private document files stored through Supabase. Document access requires application authorization. This is not a promise of end-to-end encryption. Sending a fax uses the configured delivery service and sends the document to your selected destination.
If you use an available hosted checkout, Stripe processes the payment information you enter there. Paper Lane keeps checkout references and payment status needed to manage the purchase. A plan selection or displayed internal billing record alone is not proof of payment.
Do not upload HIPAA-regulated patient records; Paper Lane does not currently support that use.
Retention and removal
The current retained-document setting is 30 days from each file's original storage time.
Active, uncertain or held content stays protected. Cleanup runs in batches, and a file is not treated as removed until deletion is confirmed. Archive and Trash keep the fax record and do not extend document retention. Expired attachments cannot be restored by restoring a record.
Minimal delivery, usage, billing and security records may remain after document removal. Hosting, storage and delivery providers can retain operational copies under their own policies. Paper Lane does not promise that removing a file immediately erases every provider copy.
Your data requests
Use Data and support requests to ask for review of your account data. If you cannot sign in, use the Account and data request form; it records your contact email and short request in the same review queue without establishing account ownership. Read the deletion-request instructions for the available steps and their limits.