Privacy Policy

1. Scope and application

This Policy applies to personal information processed by Paper Monkey in connection with the public Site, inquiries sent to Paper Monkey, and related business communications. “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an individual or household, subject to applicable statutory definitions and exceptions.

This Policy does not govern a website or system operated by a Paper Monkey client; an external service linked from the Site; employment or contractor records; or information governed by a separate client, vendor, or project agreement to the extent that agreement contains controlling privacy terms. When Paper Monkey processes information solely on a client’s instructions, the client determines the purposes of that processing and its notice or agreement may control.

This Policy is a notice of practices. It is not a contract for client services, does not amend a project agreement, and does not constitute consent where applicable law requires separate, affirmative consent.

2. Categories and sources of information

Depending on how you use the Site or communicate with Paper Monkey, the categories of information processed may include identifiers and contact details; professional or business information; inquiry, project, and correspondence content; technical and network information; transaction and accounting records created under a separate business relationship; and inferences reasonably necessary to understand or respond to a stated business request.

Sources may include you; a business or representative on whose behalf you act; a referral source; a service provider involved at your direction; publicly available business information; Paper Monkey’s hosting, network, security, and communications providers; and records generated through an actual business relationship. Paper Monkey does not purchase consumer profiles or data-broker lists for use through this Site.

3. Information you provide directly

The contact form asks for your name, the kind of help sought, a preferred response method, the corresponding telephone number or email address, a description of the request, and an optional current website address. Entries remain visible in your browser while you complete the page and are transmitted only when you select “Send to Paper Monkey.”

A stateless form relay validates the entries, applies anti-abuse controls, and sends one notification to Paper Monkey’s business email. The relay does not create a customer account, marketing enrollment, CRM record, or separate inquiry database. The inquiry then exists in Paper Monkey’s email system and may be retained with later correspondence and business records as described in this Policy.

4. Information processed through Site delivery

A browser must transmit limited technical information for a website to load. Hosting, content-delivery, domain, network, and security providers may therefore process an Internet Protocol address, request date and time, requested address, referring address, browser and device characteristics, operating system, response status, and diagnostic, performance, or security information.

Those providers may create and retain operational logs for delivery, availability, capacity management, fraud and abuse prevention, troubleshooting, and security. Paper Monkey may review available operational information when reasonably necessary to diagnose a defect, investigate misuse, protect the Site, comply with law, or establish or defend a claim. Paper Monkey does not use that information for advertising profiles or automated decisions producing legal or similarly significant effects.

5. Cookies, local storage, and tracking signals

The Site stores one appearance preference in browser local storage if you manually select light or dark mode. The value remains on your device so the Site can remember that choice. It does not contain your name, contact information, inquiry text, or a cross-site identifier. You may remove it through your browser’s site-data controls; if it is absent, the Site follows your device preference.

Paper Monkey has not configured advertising cookies, analytics cookies, advertising pixels, cross-site behavioral tracking, embedded social-media widgets, or third-party audience analytics on the Site. Infrastructure providers may use essential technical mechanisms under their own policies to route requests, maintain security, balance traffic, or provide other operational functions.

Because Paper Monkey does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, “Do Not Track,” Global Privacy Control, and similar signals do not presently change Site behavior. Paper Monkey will recognize legally required preference signals if future practices make them applicable. Paper Monkey has not knowingly authorized another party to collect personally identifiable information through this Site concerning a visitor’s activities over time and across unrelated websites, apart from operational processing needed to deliver or secure the Site or a communication requested by the visitor.

6. Sensitive information

The public Site and contact form do not request payment-card numbers, financial-account credentials, account passwords, Social Security numbers, driver-license or passport numbers, precise location, medical records, diagnoses, disability documentation, or other information requiring special protection. Do not include such information in an initial inquiry.

An accessibility request does not require disclosure of a disability, diagnosis, medical history, or other health information. A page address, the task attempted, the barrier encountered, and the requested format or alternative are sufficient. If you believe you sent sensitive information unintentionally, contact Paper Monkey so the circumstances and an appropriate response can be evaluated. If sensitive information is genuinely required for authorized project work, contact Paper Monkey before sending it. Additional notice, specific consent, processor terms, security measures, or other legal controls may be required; a general inquiry or project agreement does not substitute for separate consent where law requires it.

7. Purposes for using information

Paper Monkey may use personal information to deliver, operate, maintain, troubleshoot, and secure the Site; respond to inquiries; understand a stated business need; communicate about requested or existing work; prepare proposals, statements of work, and agreements; perform and support authorized services; administer a business relationship; maintain tax, accounting, insurance, transaction, and other business records; detect or prevent fraud, abuse, or security incidents; enforce rights and agreements; comply with law and lawful process; establish, exercise, or defend legal claims; and improve Site reliability, usability, and accessibility.

Paper Monkey does not operate an email-marketing enrollment through the Site. Sending an inquiry does not enroll the sender in unrelated promotional email. Any unrelated marketing communication requires a separate affirmative choice where applicable and must include any legally required opt-out method.

8. Sale, targeted advertising, and profiling

Paper Monkey does not sell or rent personal information. Paper Monkey does not disclose personal information to data brokers, share it for cross-context behavioral advertising, use it for targeted advertising, or profile Site visitors in furtherance of decisions producing legal or similarly significant effects. Paper Monkey has not sold or shared personal information for those purposes during the twelve months preceding this Policy’s effective date.

9. Service providers, contractors, and professional advisers

Paper Monkey may disclose personal information to providers and contractors supporting website hosting and delivery, domain and network services, email and communications, file or document storage, security, accounting, insurance, legal advice, and authorized project work. Access or disclosure is limited to what Paper Monkey reasonably determines is relevant to the assigned function. Those parties process information under applicable law, their own terms and privacy notices, and any applicable agreement with Paper Monkey.

Paper Monkey may also disclose information to an accountant, attorney, insurer, auditor, or other professional adviser when reasonably necessary to obtain advice, manage risk, comply with obligations, or establish, exercise, or defend a claim. A recipient whom you direct Paper Monkey to involve will receive the information reasonably necessary to carry out that direction.

10. Legal process, safety, and protection of rights

Paper Monkey may preserve, use, or disclose information when reasonably believed necessary to comply with a statute, regulation, subpoena, court order, governmental demand, or other lawful process; investigate or prevent fraud, abuse, or a security incident; protect the rights, safety, or property of Paper Monkey or another person; enforce an agreement; respond to a dispute; or establish, exercise, or defend a legal claim.

Paper Monkey may contest a request that it reasonably believes is unlawful, overbroad, defective, or inconsistent with an applicable privilege or obligation. Notice to an affected person may be delayed or omitted when prohibited by law, court order, safety considerations, the integrity of an investigation, or another lawful reason.

11. Business transfers

Information may be evaluated, transferred, or disclosed as part of a proposed or completed financing, insurance review, merger, acquisition, reorganization, asset sale, business succession, insolvency proceeding, or similar transaction. Any recipient remains subject to applicable law and to commitments that continue to apply to the information.

12. Client projects and client-controlled information

This Policy does not establish the privacy terms for a website, system, account, database, or other service Paper Monkey builds or maintains for a client. Ownership, control, instructions, permitted uses, security responsibilities, retention, return, deletion, subprocessors, and incident obligations for project information are determined by the controlling project agreement and the client’s own legal obligations.

Where Paper Monkey acts solely on a client’s documented instructions, requests concerning that information may need to be directed to the client. Paper Monkey will not represent that it owns client information merely because Paper Monkey designed, hosts, supports, or can technically access a client system.

13. Automated processing and artificial intelligence

The public Site does not contain a conversational artificial-intelligence system and does not use personal information submitted through the Site to make automated decisions producing legal or similarly significant effects. If separately authorized project work involves an artificial-intelligence service or other automated processing, the applicable project agreement, documented instructions, and provider terms govern that work.

14. Retention and disposal

Paper Monkey retains personal information for no longer than reasonably necessary for the purposes described in this Policy, subject to the record’s business, legal, security, and evidentiary purpose. Relevant criteria include the sensitivity and amount of information; whether a project or continuing relationship results; operational, tax, accounting, insurance, and contractual requirements; potential or actual disputes; applicable limitation periods; legal holds; and other legal obligations. A controlling written agreement may establish a specific period for project information.

When an applicable retention need ends, Paper Monkey will delete, anonymize, aggregate, or otherwise dispose of the information when reasonably practicable using a method appropriate to the information and system involved. Completion may be delayed where a record remains in a routine backup, must be preserved for security or legal reasons, or is retained by a provider under its own schedule. Archiving a record is not the same as deleting it.

15. Security safeguards

Paper Monkey uses administrative, technical, and physical safeguards considered reasonable in light of the nature and amount of information involved, the systems actually in use, and the foreseeable risks. The public Site uses encrypted web connections and avoids a server-side inquiry database. Safeguards are risk-based and may change as systems, providers, and threats change. This Policy does not represent that Paper Monkey holds a particular certification or that any specific control applies to every record or provider.

No website, email system, cloud service, device, storage system, or transmission method can be guaranteed completely secure. Ordinary email may pass through systems outside Paper Monkey’s control. You are responsible for the security of your own device and account and for choosing information appropriate to send by ordinary email.

16. Security incidents

Paper Monkey evaluates suspected security incidents affecting information within its control and may take measures appropriate to the circumstances, including containment, investigation, preservation of evidence, remediation, provider coordination, and notification. If applicable law requires notice to an affected person, regulator, or other party, Paper Monkey will provide notice in the manner and within the period required by that law, subject to lawful investigative or law-enforcement delay.

17. Privacy choices and requests

You may choose not to send an inquiry, omit information identified as optional, call, text, or email Paper Monkey instead of using the contact form, or remove the appearance preference through your browser. Depending on your location and applicable law, you may have rights to request access, correction, deletion, or a portable copy; obtain information about processing; restrict or object to certain processing; withdraw consent; opt out of a covered sale, sharing, targeted advertising, or profiling activity; or appeal a decision concerning a privacy request.

Submit a request to hello@papermonkeysystems.com with “Privacy Request” in the subject line and enough detail to identify the request. Paper Monkey may request information reasonably necessary to verify identity, authority, and the information involved. An authorized agent may submit a request where permitted by law, subject to verification of the authorization and the individual’s identity. Paper Monkey will respond within the period required by applicable law and will not discriminate against a person for exercising a protected privacy right.

Privacy rights are not absolute. An exception may apply where information is needed to complete a transaction, perform a contract, maintain security, prevent fraud, exercise free-speech or other legal rights, comply with law, preserve evidence, or establish, exercise, or defend a claim. If a request is denied and applicable law provides an appeal right, reply with “Privacy Appeal” in the subject line and explain the basis for reconsideration.

18. State-specific disclosures

During the preceding twelve months, the categories of personal information Paper Monkey may have processed in connection with the Site or direct business communications are the categories described in Sections 2 through 4. The sources, purposes, and categories of recipients are described in Sections 2, 7, 9, 10, and 11. Paper Monkey has not sold personal information or shared it for cross-context behavioral advertising during that period.

A state privacy law may apply only after statutory coverage thresholds, exemptions, and definitions are satisfied. Paper Monkey does not claim that every jurisdiction-specific statute applies to its present operations. Where an applicable law grants a person a right or imposes a disclosure, opt-out, appeal, or response obligation, Paper Monkey will address the request under that law and any lawful exception.

19. Children’s privacy

The Site concerns business services and is not directed to children under 13. Paper Monkey does not knowingly collect personal information online from a child under 13 through the Site. If a parent or guardian believes a child has sent personal information to Paper Monkey, the parent or guardian should contact Paper Monkey. After reasonable verification, Paper Monkey will delete information collected from the child unless applicable law permits or requires its retention.

20. Processing locations

The Site is intended primarily for a United States business audience. Paper Monkey and the hosting, network, security, email, and other providers involved may process information in the United States and in other locations where they operate. If a person accesses the Site or contacts Paper Monkey from another country, the information may be processed in jurisdictions whose privacy laws and government-access rules differ from those in that person’s location.

21. External services and links

Submitting the contact form uses infrastructure that delivers the request to Paper Monkey’s email service. Selecting a call, text, or email link may open software or a service provided by your device or communications provider. The Site may also link to websites or services operated by others. Paper Monkey does not control and is not responsible for an external service’s privacy, security, availability, content, or terms. Review the external operator’s notices before providing information to it.

22. Changes to this Policy

Paper Monkey may revise this Policy when the Site, business practices, providers, or applicable requirements change. The effective date at the top identifies the current version. A material change will be posted on this page and additional notice or consent will be provided where required by law. Unless applicable law requires otherwise, a revised Policy applies prospectively and does not amend a separate written agreement.

23. Contact

Questions, privacy requests, appeals, and concerns may be sent to Paper Monkey Small Business Systems at hello@papermonkeysystems.com.