Privacy Policy

1. What We Collect

Our Website (interappy.io)

Our website is hosted on Vercel, which collects standard server logs: IP address, browser type, pages visited, and timestamps. We do not use advertising networks, third-party analytics, or tracking pixels.

PrettyPaste

PrettyPaste processes all clipboard content entirely on your device. No clipboard data is ever transmitted to our servers. We have no visibility into what you copy or paste. If you download PrettyPaste from our website, standard Vercel server logs apply to that download request.

Surface

Surface collects the minimum information needed to operate the service:

• Account information: If you sign in with Google, we receive your name and email address via Google OAuth.
• Uploaded files: Files you upload are stored on our servers to generate and serve your shareable links. Anonymous uploads expire after 7 days.
• Session information: Standard server logs (IP address, timestamps, browser type) via Vercel.
• Anonymous usage: If you use Surface without signing in, we do not collect your name or email. We store only the files you upload and a random token used to generate your link.

2. How We Use Your Information

We use the information we collect only to:

• Provide and operate our Services
• Authenticate your identity and manage your account (Surface)
• Store and serve files you upload (Surface)
• Send transactional communications such as account-related notifications
• Investigate abuse, enforce our Terms of Service, and comply with legal obligations

We do not use your information for advertising. We do not profile you across sites or services.

3. Sharing with Third Parties

We share information with third parties only as strictly necessary to operate our Services:

• Vercel — hosting, CDN, and infrastructure. Vercel processes server logs and stores uploaded files on our behalf under their own data processing terms.
• Google — authentication for Surface accounts via Google OAuth. When you sign in with Google, we receive your name and email address from Google.
• Legal compliance — we may disclose information in response to lawful requests from government authorities, court orders, or as otherwise required by applicable law.

We do not sell, rent, or lease your personal information to any third party. In the event of a merger, acquisition, or sale of substantially all of our assets, your information may transfer to the successor entity under equivalent privacy protections.

4. Data Retention

• Surface files (anonymous): Deleted automatically after 7 days
• Surface files (signed-in accounts): Retained until you delete them or close your account
• Account information: Retained while your account is active, and for a reasonable period afterward for legal and operational purposes
• Server logs:Retained per Vercel's standard log retention policies

You can delete your uploaded files at any time from within Surface. To request deletion of your account and associated data, contact us at privacy@interappy.io.

5. Your Rights

All Users

Regardless of where you are located, you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information, subject to our legal obligations

California Residents (CCPA / CPRA)

California residents have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information (not applicable — we do not sell or share for advertising)
• Non-discrimination for exercising your privacy rights

Categories of personal information we collect: identifiers (name, email, IP address), internet activity (pages visited, session data), and content you choose to upload. We collect this information directly from you through your use of our Services. We do not sell personal information.

To exercise your California privacy rights, contact us at privacy@interappy.io. We will respond within 45 days.

EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Lodge a complaint with your local supervisory authority

Our legal bases for processing personal data are: performance of a contract with you, our legitimate interest in operating our Services, and compliance with legal obligations. Cross-border transfers of personal data to the United States are conducted in accordance with applicable data protection laws, including through reliance on Standard Contractual Clauses where required.

To exercise your rights, contact us at privacy@interappy.io.

6. Cookies

Our website uses minimal cookies. Vercel may set functional cookies required to serve our website reliably. Surface uses session cookies for authentication purposes when you are signed in. We do not use advertising cookies or third-party tracking cookies.

7. Security

We take reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS), secure cloud infrastructure via Vercel, and limited internal access to data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children’s Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us at privacy@interappy.io and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version at this URL with a new effective date. We encourage you to review this policy periodically.

10. Contact

For privacy-related questions, requests, or complaints:

privacy@interappy.io
Interappy, LLC · United States