Privacy policy

91% never leaves our serverDeleted when doneIdentifiers replaced before AINo ads, no tracking

Controller: Biomag, S.L.U., B01037241, c/ Barrachi, 39 – Pab. 3, 01013 Vitoria-Gasteiz (Álava, España), privacidad@aim-papyr.ai

What we process and why

Documents, images and audio you upload: processed in memory solely to run the operation you request and never stored after the response. Legal basis: performance of the service (art. 6.1.b GDPR).
AI features: the necessary text is sent to language-model providers. Before leaving, detected identifiers (IDs, IBANs, phone numbers…) are pseudonymised (replaced with placeholders); providers never receive them in the clear. Some providers may be outside the EEA; transfers rely on the provider's standard contractual clauses. Your content is not used to train our models.
Remote signature: if you send a document for signature, it is kept encrypted (the key travels only in the email links) for up to 7 days or until completed, and signed copies are deleted 7 days later. Recorded as evidence: document hashes, signer email and name, date, IP and browser.
Voice transcription: runs entirely on our servers; audio never reaches third parties and is discarded when done.
Usage statistics: aggregated per-tool counters and per-page daily visits, with no tracking cookies, no IPs and no personal identifiers.
Enterprise contact form: email, company and message, to answer your request (art. 6.1.b), kept while the relationship lasts or until you ask for erasure.
Infrastructure logs: our hosting provider (Railway) keeps short-lived technical logs that may include IPs, for security purposes.

Cookies & local storage

No advertising or tracking cookies. Only: one anonymous technical cookie to enforce the free daily AI quota, and a language preference in your browser (localStorage). Both are strictly functional and exempt from consent.

Your rights

You may exercise access, rectification, erasure, objection, restriction and portability by writing to privacidad@aim-papyr.ai. You may also complain to the Spanish DPA (aepd.es).

Last updated: 2026-07-18