Privacy Policy

Last updated: 1 Nov 2025

1. Who We Are

This Privacy Policy describes how EPIPHANIE, a French société par actions simplifiée (SAS), processes personal data in connection with the Endless Paper application (the “App”).

Data Controller
EPIPHANIE (SAS)
Registered office: SEMIA, 11 rue de l’Académie, 67000 Strasbourg, France
Email: support@endlesspaper.app

Epiphanie is the data controller for the personal data described in this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to the App and any related services provided directly by Epiphanie (collectively, the “Service”). It does not apply to third-party websites, services, or applications that may be linked from the App.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

3. Information We Collect

We aim to collect as little personal data as possible. Most features of the App can be used without creating an account or providing personal data.

3.1 Information You Provide

• Support communications: If you contact us by email, we collect the information you choose to provide (such as your email address and the content of your message).
• WebXP account information (optional): If you choose to use the optional WebXP service (which allows you to share a canvas on the web), you must explicitly agree to the WebXP Terms and Conditions and create an account on our backend. In that case, we collect:

• your email address;
• authentication-related information necessary to provide the WebXP service.

Creating a WebXP account is optional and is not required to use the core functionality of the App.

3.2 Information Collected Automatically

When you use the App or WebXP, limited technical information (“Log Data”) may be processed automatically, including:

• Internet Protocol (IP) address
• Device type and model
• Operating system and version
• App version
• Date and time of use
• Basic diagnostic and error information

This data is used solely to operate, secure, and improve the Service.

3.3 Information We Do Not Collect

We do not collect:

• advertising identifiers
• user profiling data
• precise location data

We do not use third-party SDKs or services for analytics, crash reporting, advertising, or user tracking.

4. How We Use Information (Purposes and Legal Bases)

We process personal data only where permitted by applicable law, including the EU General Data Protection Regulation (GDPR).

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Support communications are retained only as long as needed to handle your request and for reasonable follow-up.
• Technical and log data is retained for a limited period and then deleted or anonymized.

6. Data Sharing and Disclosure

We do not sell, rent, or share your personal data with third parties for advertising or analytics purposes.

We may disclose personal data only in the following limited circumstances:

• Service operation: to service providers acting as data processors strictly necessary to operate the WebXP backend (for example, infrastructure or email delivery providers), under contractual obligations consistent with this Privacy Policy;
• Legal compliance: if required to do so by law, regulation, or a valid legal request;
• Protection of rights: to protect the rights, property, or safety of Epiphanie, our users, or others;
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to applicable data protection laws.

Apple may process certain information independently as part of App Store distribution, subscriptions, and payments, in accordance with Apple’s own privacy policies.

7. International Data Transfers

Epiphanie is established in France. Personal data may be processed in countries other than your country of residence, including outside the European Economic Area, where necessary to operate the App or the optional WebXP service.

Where required by law, we implement appropriate safeguards, such as standard contractual clauses, to protect personal data transferred internationally.

8. Security

We use commercially reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• access your personal data;
• request correction or deletion;
• object to or restrict processing;
• request data portability;
• withdraw consent where processing is based on consent.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, contact us at support@endlesspaper.app.

10. Children’s Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13.

If we become aware that a child under 13 has provided personal data, we will delete such information promptly. If you believe that a child has provided us with personal data, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted with the App or on our website. Changes are effective upon publication.

Where required by applicable law, we will provide additional notice or obtain your consent before material changes take effect.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, you may contact us at:

EPIPHANIE (SAS)
SEMIA, 11 rue de l’Académie
67000 Strasbourg, France
Email: support@endlesspaper.app