Who is responsible
PaperGo is a self-service PDF printing service operated by Milan Sampath, at #1531, B Block, Sahakarnagar, 21st Cross, 4th Main Road, Bengaluru, Karnataka 560092, India. Milan Sampath is your privacy and grievance contact. Email work.milancodes@gmail.com, call +91 77602 90528, or use our request form.
What we collect and why
We use the following information to provide the printing service you request:
Account information
Clerk, our authentication provider, processes your sign-in details, such as your email, profile information and credentials or the social sign-in information you authorise. PaperGo links print sessions to your Clerk account ID to protect access to your documents and orders.
Documents and file details
We receive the PDF you upload, including any personal or sensitive information inside it, its filename, size, type and page count. We inspect the PDF to check that it can be printed, store it temporarily, and send it to your selected kiosk to print.
Print sessions and orders
We keep your selected kiosk, session ID and expiry, page selection, number of copies, colour and duplex options, order number, price, timestamps and print status. These are used to calculate the price, fulfil the job and resolve problems.
Payments
We keep payment provider references, amount, currency and payment status to verify payment and reconcile orders. Razorpay processes the payment details you enter in its checkout. PaperGo’s payment integration does not store your card number, CVV or UPI PIN.
Security and service records
We use IP addresses for request rate limits. Our hosting and authentication providers may process request metadata, device/browser details and security logs. We also keep administrator audit records and printer error/status information to protect and maintain the service.
Consent and support requests
We record the notice and terms versions accepted for an upload and the server timestamp. If you contact us, we process your account ID, request type, message, timestamps and our reply to handle your request and keep a record of its outcome.
Your consent and choices
Before a PDF is uploaded, we ask for your specific consent to process the document, file details and associated account, kiosk, order and payment records for printing. Accepting our terms is a separate choice. If you decline, you can still read our public pages, but we cannot accept the upload.
You can withdraw consent or request erasure. Requests are reviewed by the operator; submitting a request does not instantly stop an active printer or delete records. We will explain any processing or retention required by law. Withdrawal may prevent us from completing a print job. It does not undo a print already produced.
The printing flow does not use uploaded documents for advertising or AI training. We do not sell uploaded documents or personal data. Upload only documents you are entitled to share, and include other people’s information only with appropriate authority.
How long information stays
Each uploaded PDF receives an expiry time based on the kiosk’s current retention setting. The default is 24 hours from upload. The upload notice shows the current setting. Expired documents become unavailable to the printing/download APIs; storage deletion runs through scheduled and application-triggered cleanup. Deletion may happen later than expiry, and failed storage deletions are retried.
Deleting the stored PDF does not erase its filename, order details, account links, payment references or consent record. At present, these database records and support requests do not have an automated deletion schedule. You can request erasure; we will assess records needed for legal obligations, disputes and security and explain any retained information. Provider backups and kiosk spool files have separate retention arrangements.
Sign-in/account records are managed through Clerk. Deleting your Clerk account alone does not erase PaperGo’s order or support records. Request deletion of those records separately through Contact & requests.
Protecting your information
Access to customer sessions and orders is restricted by account ownership. Kiosk jobs are scoped to authenticated kiosk credentials. Document download links have signed, time-limited tokens, and hosted Blob storage is private. These safeguards reduce risk but cannot guarantee that a security incident will never occur.
Collect your pages promptly: a physical printer may be in a shared space. Contact us immediately if someone else’s document prints or you suspect unauthorised access. Please avoid attaching the document itself to a support request unless we specifically need it.
Requests and complaints
Use our request form to ask for a summary of the data we hold, correction, erasure, consent withdrawal, grievance redressal or information about nominating a representative. You can also email or call the contact above. A parent or guardian can contact us about a child’s data.
We may need proportionate verification before sharing or changing data. Do not send passwords, payment PINs or identity-document copies in the form. Account-based requests have a reference and a status/reply you can view while signed in. For email complaints, ask for a written acknowledgment and reference. We aim to acknowledge complaints within 48 hours and resolve them within one month; unresolved issues receive an explanation.
Additional statutory rights and routes to the Data Protection Board apply as the relevant provisions of India’s Digital Personal Data Protection Act come into force. Exhaust the applicable grievance process before escalating to the Board. Consumer complaints can also be raised with the National Consumer Helpline. These policies do not waive your legal rights.
Users under 18
PaperGo currently allows self-service use by customers under 18. We do not currently verify a parent’s identity or obtain verifiable parental consent. A child’s document can also contain sensitive information; avoid uploading information that is unnecessary for your print job.
India’s DPDP Act defines a child as a person under 18. Its child-data provisions require verifiable parental consent and impose other protections when those provisions take effect, subject to applicable exemptions. The current self-service flow does not provide that verification. We will need to introduce an appropriate process or change access before those requirements apply. Parents and guardians can contact Milan Sampath to raise a concern or request erasure.
Updates to this notice
This draft describes the current app and was reviewed on 9 October 2026. Material changes to purposes, recipients or consent will require a revised notice and, where appropriate, a fresh choice. The current main DPDP commencement notification phases the substantive duties in eighteen months after Gazette publication in November 2025. See the official commencement notification; this draft is not a claim of complete legal compliance.