Privacy Policy

1. Who we are

PaperMind is developed and published by COBI Management SRL, trading as HighRoad Software, a company incorporated in Belgium (BCE/KBO number: available on request). In this policy, "we," "us," and "our" refer to COBI Management SRL.

Contact: privacy@highroadsoftware.com

2. What information PaperMind collects

PaperMind collects no personal information and no usage data. This is reflected in our Apple PrivacyInfo manifest, which declares zero data types collected under Apple's privacy nutrition label framework.

Specifically, PaperMind does not collect:

• Document content, titles, or file names
• Search queries or chat messages
• Usage patterns, feature interaction, or session data
• Device identifiers, IP addresses, or location data
• Crash reports or diagnostic data
• Email addresses or any account information (there are no accounts)

3. Local processing and data storage

All document processing in PaperMind happens on your Mac:

• Document parsing and text extraction run locally using on-device libraries
• OCR processing uses Apple's Vision framework and other on-device engines
• Embedding generation runs on your CPU or Neural Engine
• The search index (BM25 and vector store) is stored in your Application Support directory
• Chat history is stored locally in an SQLite database on your machine
• Workspace data never leaves your device

You can delete all PaperMind data at any time by removing the app's Application Support folder at ~/Library/Application Support/PaperMind/. Uninstalling the app does not automatically remove this folder; you need to delete it manually if you want to remove all local data.

4. Optional cloud LLM integration

PaperMind supports optional integration with cloud-based language models from OpenAI (GPT-4o, GPT-4 Turbo) and Anthropic (Claude). These integrations are disabled by default and require you to provide your own API key.

If you choose to use a cloud LLM:

• Only the relevant text passages retrieved from your documents are sent to the LLM provider — not full documents
• Your API key is stored securely in macOS Keychain and never transmitted to HighRoad Software
• Data sent to cloud LLM providers is governed by their respective privacy policies (OpenAI: openai.com/privacy; Anthropic: anthropic.com/privacy)
• You can switch to a local LLM (via Ollama or llama.cpp) at any time to avoid any cloud transmission

HighRoad Software has no access to your API keys, the passages you send, or the responses you receive from cloud LLM providers.

5. License verification

PaperMind uses offline license verification. When you purchase a license, a cryptographically signed license key is issued. The app verifies this key locally using public-key cryptography — no network request is made during verification.

When you purchase a license through our website, the purchase is processed by our payment provider (Paddle). Paddle's privacy policy governs the data collected during the purchase transaction. We receive only the information necessary to generate and deliver your license key.

When you purchase through the Mac App Store, the transaction is processed entirely by Apple under Apple's privacy policy.

6. When you visit our website

The HighRoad Software website (highroadsoftware.com) uses essential cookies for basic functionality (cookie consent preferences). We do not use analytics cookies, advertising cookies, or tracking pixels.

The website is hosted on infrastructure that may log standard web server access logs (IP address, browser type, requested URL, timestamp) for security and operational purposes. These logs are retained for a maximum of 30 days and are not used for profiling or marketing.

7. Third-party services

PaperMind itself does not integrate with any third-party service except the optional cloud LLMs described in section 4.

The website does not load third-party scripts, tracking pixels, or social media widgets.

Google Fonts are loaded via a CSS import in our stylesheet. This results in a DNS lookup to Google's servers when the page loads. If you prefer to avoid this, you can use a content blocker to block fonts.googleapis.com — the site uses system font fallbacks and remains fully readable.

8. Children

PaperMind is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information in connection with a purchase, please contact us at privacy@highroadsoftware.com.

9. Your rights

Under GDPR and applicable data protection law, you have rights regarding personal data we hold about you. Because PaperMind collects no personal data from app use, the practical scope of these rights is limited to any data collected in connection with a license purchase (handled by Paddle) or website contact.

You may:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Lodge a complaint with your national data protection authority (in Belgium: the Data Protection Authority, autoriteprotectiondonnees.be)

To exercise these rights, contact us at privacy@highroadsoftware.com.

10. Changes to this policy

We may update this policy to reflect changes in the app or applicable law. Material changes will be announced on the HighRoad Software website. The date at the top of this page reflects when the policy was last revised.

Continued use of PaperMind after a policy update constitutes acceptance of the revised policy.

11. Contact

For privacy questions, data requests, or concerns:

• Email: privacy@highroadsoftware.com
• Support: support@highroadsoftware.com

COBI Management SRL / HighRoad Software — Belgium