Privacy Policy

Last updated 26 October 2026

This policy explains how Unpaper handles personal information. Unpaper is a web app at getunpaper.com and app.getunpaper.com that helps consultants, studios and small businesses write proposals, send them to clients and get them accepted online. It's run by Hieland Road Pty Ltd (ABN 50 665 485 941), a company based in Melbourne, Australia. When we say "we", "us" or "our", we mean Hieland Road Pty Ltd. When we say "you", we mean anyone whose information we handle, whether you hold an Unpaper account or you've been sent a proposal through it.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We've also written this policy with the EU and UK General Data Protection Regulation (GDPR) in mind, so if you're outside Australia you'll find a section near the end that covers your rights.

If you have a question about anything here, email us at hello@usefulmachines.com.au.

Two kinds of people use Unpaper

Most of what's in this policy depends on which of two groups you're in.

Account holders are the people and businesses who sign up for Unpaper, set up their business details and create proposals. We collect information from you directly and we're responsible for how it's handled.

Clients are the people an account holder sends a proposal to. If you're a client, you probably haven't dealt with us directly. The account holder entered your name and email address so they could send you a proposal, and when you view or accept it we record some details so there's a reliable record of what happened. The account holder decides what goes into their proposals and who they send them to, so for most purposes they're responsible for your information and we handle it on their behalf. The main exception is the record of a proposal you've accepted, which we keep even if the account holder later closes their account. The section on how long we keep information explains why. If you'd like to know what a business is doing with your details, it's usually best to ask them first, but you're always welcome to contact us too.

What we collect

If you hold an account

When you sign up, we collect your name and email address. You can sign in with an email code or Google. Sign-in is handled by our authentication provider, Clerk. If you use Google, we receive the basic profile that provider shares: your name, your email address and, if they send one, your profile picture. We don't see your password or your email code. Clerk holds those.

When you set up Unpaper, you give us your business details. These can include your business name, logo, rates, currency, timezone and the standard terms you want to include in proposals. A logo is part of the Pro plan.

When you create proposals, we store what you put in them. That includes your clients' names and email addresses, the scope of work, prices, payment options and any other content you add.

If you take up Pro, our payment provider, Stripe, collects your payment card and billing details. We don't see or store your card number. We store the subscription, the price, the currency, the billing interval and the billing country so we can manage the plan. Stripe keeps the card.

If you connect an AI agent or another app, we store the connection and what that app is allowed to do. The section on who we share information with explains that.

If you contact us, we keep a record of the conversation and any information you choose to share.

If you're a client

We hold the name and email address the account holder entered for you, along with the content of any proposal they've sent you.

When someone opens a sent proposal link, we record that it was viewed and when. The first time that happens, we email the business once. The email says the proposal they sent has been opened. It doesn't include an IP address or a city, and it doesn't prove that the named client was the person who opened it. A forwarded link can open it too. Later opens stay on the proposal and don't send another email. This happens on every plan.

When you accept a proposal, you choose a payment option where the proposal asks for one, and you type your name. You don't type a separate email address. We record the name you typed, the email address the proposal was sent to, the date and time, the IP address, the city, and the version of the proposal you accepted. The IP address comes from the host's own header. The city is the host's city header, decoded. If those headers are missing, nothing is stored in their place. We keep this as a record of the acceptance for both you and the account holder. The business can see that record, including the IP address and city, in their Unpaper account. The public page after you accept, and the accepted PDF, don't show the IP address or the city.

Information collected automatically

Like most web services, our systems record technical details when anyone uses Unpaper. These include your IP address, browser type, device information, the pages you request and the time of each request. We use these to run the service, keep it secure and work out what's gone wrong when something breaks. We also use IP addresses to limit how many requests can be made in a short time, which helps stop abuse.

We don't use a product analytics tool, and we don't record session replays. If a page breaks, we send an error report to PostHog so we can fix it. The report includes the error, where it happened in our code, the page address with the query string removed, and basic browser and device details such as browser type and IP address. It does not include the proposal, a client's email address or the acceptance record. When you're signed in, the report is tied to your sign-in id, not your email address. On a proposal link, the report is sent without that id. We don't collect sensitive information, such as health information or information about your racial or ethnic origin, and we ask that you don't put it in proposals.

How we collect it

We collect most information directly from account holders when they sign up and use Unpaper. We collect client information from the account holder who enters it, and from clients themselves when they view and accept a proposal. Some information comes from our service providers, such as Google when you choose to sign in with it, and Stripe when you pay for Pro.

If you don't give us the information we ask for, we may not be able to provide the service. For example, we can't create an account without an email address, and an account holder can't send a proposal without a client's email address.

Why we use it

We use personal information to provide Unpaper and to run our business. In practice that means creating and managing accounts and signing people in, storing and displaying proposals, sending proposal emails and notifications (such as letting an account holder know when a proposal has been opened or accepted), recording acceptances and producing accepted proposal PDFs, and taking payments for Pro.

We also use it to keep the service secure and prevent fraud and abuse, to respond to questions and support requests, to send account holders important messages about their account, the service or changes to our terms, and to keep records of accepted proposals so there's evidence of what was agreed if a question or dispute comes up later. Sometimes we need to use information to meet our legal obligations, such as keeping tax records, or to protect our rights.

We'll only send account holders marketing emails, such as product news, if they've agreed to receive them, and every marketing email will include a way to unsubscribe. We never send marketing to clients, and we don't use the details account holders enter about their clients for our own marketing.

We don't sell personal information, and we don't use it for advertising. We don't use personal information to make automated decisions that have a significant effect on anyone.

Legal basis for using your information

Australian privacy law doesn't require a legal basis in the way the GDPR does, but if the GDPR applies to you, these are the grounds we rely on.

For account holders, we use your information mainly because we need to in order to provide the service you've signed up for (performance of a contract). We rely on our legitimate interests to keep Unpaper secure, prevent abuse and keep business records, and we've weighed those interests against your rights. We rely on your consent for marketing emails. You can withdraw that consent at any time. Where we keep records because the law requires it, we rely on legal obligation.

For clients, the account holder is the controller of your information and we act as their processor. We process your details on their instructions to deliver and record their proposals. Where we use client information for our own purposes, such as security and preventing abuse, we rely on our legitimate interests.

Accepted proposals are treated a little differently. If an account holder closes their account, we keep each accepted proposal, its acceptance record and the accepted PDF, and from that point we're responsible for those records ourselves. We rely on our legitimate interests, and the legitimate interests of the account holder and their client, in being able to show what was agreed, when and by whom, and in establishing or defending legal claims. Where a law requires a record to be kept, we rely on legal obligation. We think this is what both parties to an agreement would reasonably expect: an accepted agreement is normally kept as a record, and deleting it the moment one party closes their account could leave the other without evidence of what they agreed to.

Google user data

If you sign in with Google, we ask Google only for your basic profile and email address. We use this information solely to create your account, sign you in and show your name and picture in the app. We don't access your Gmail, Google Drive, Google Calendar, contacts or any other Google data, and we don't use Google user data for advertising. We don't pass it to an analytics provider. We don't use one.

Unpaper's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We don't sell Google user data, and we don't let people read it except where you've asked us to (for example, when you need help with your account), where it's needed for security or to comply with the law, or where the data has been aggregated and anonymised. If you connect an app yourself, that app receives only what the connection allows. You can remove Unpaper's access at any time from your Google Account permissions.

Cookies and local storage

Some cookies are essential. Our authentication provider, Clerk, sets cookies that keep you signed in and protect your account. Without them you couldn't log in, so they can't be turned off while you're using your account.

The billing page can store a cookie that remembers whether prices are shown in Australian or US dollars. That cookie only changes the prices on the page. It doesn't follow you around the web, and the charge itself follows the billing country chosen at checkout, not the cookie.

We don't use analytics cookies, advertising cookies or session replay. PostHog does not set an analytics cookie, and it does not record how you use the site. getunpaper.com and app.getunpaper.com are both this app. We don't host the marketing site on a separate website builder.

If you block the essential cookies, you won't be able to sign in. Blocking the currency cookie won't stop Unpaper from working.

We use a small number of trusted service providers to run Unpaper. They process personal information on our behalf, only for the purpose of providing their service to us, and they're bound by contract to protect it. They are:

Clerk, for sign-in and account authentication, including Google sign-in. Based in the United States.
Supabase, for the Postgres database, where accounts, business details and proposals are stored. Hosted in Sydney, Australia (ap-southeast-2).
Vercel, for hosting the app. The app's servers run in Sydney (syd1). Vercel's edge network serves pages globally, and Vercel Inc is a US company.
Resend, for sending email, such as proposal links and notices. Proposal mail uses proposals@mail.getunpaper.com. Notices use notifications@notify.getunpaper.com. Based in the United States.
Stripe, for Pro subscriptions. Based in the United States, with operations in Australia and other countries.
Upstash, for rate limiting, which uses IP addresses to stop abuse.
PostHog, for error monitoring when a page breaks. Based in the United States. The report includes the error, where it happened in our code, the page address with the query string removed, and basic browser and device details such as browser type and IP address. We don't send proposal content, client email addresses or acceptance records, and we don't use it for session replay or product analytics.

When an account holder sends a proposal, the client receives the proposal and the account holder's business details. When a client accepts a proposal, the account holder can see the acceptance record, including the name typed, the email address the proposal was sent to, the time, the IP address, the city and the version accepted.

If you connect an AI agent or another app, you do that through Unpaper's connector. The connector is at mcp.getunpaper.com, and you approve it while signed in at app.getunpaper.com. That app can read and change the proposals and templates the connection allows. Unpaper doesn't send your proposals to a model of its own. You can disconnect the app in Settings.

We may also disclose personal information if the law requires it, if we need to protect the rights, safety or property of anyone, or to professional advisers such as our accountants and lawyers. If our business is sold or merged, personal information may pass to the new owner, who'll be bound by this policy or one that's at least as protective.

Overseas disclosure

The database and the app's servers are in Sydney. Vercel's edge network serves pages globally, and Vercel Inc is a US company, so a request may be handled outside Australia. Some of our other service providers store or process personal information outside Australia, most commonly in the United States. Depending on how a provider's network routes traffic, information may also pass through other countries where they operate.

Before we use a provider, we take reasonable steps to make sure they handle personal information in a way that's consistent with the Australian Privacy Principles, including through contractual commitments and their security practices. Where the GDPR applies, we rely on appropriate safeguards for transfers, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.

Security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, change or disclosure. Information is encrypted in transit using HTTPS and is stored with providers that encrypt data at rest. Access to production systems is limited to people who need it, and we use authentication and rate limiting to protect accounts and prevent abuse. Proposal links are hard to guess, but anyone who has a link can view that proposal, so account holders should only share links with the people they're meant for.

No system is completely secure. If we become aware of a data breach that's likely to cause serious harm, we'll notify affected people and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires. You can help by keeping your sign-in details private and letting us know straight away if you think your account has been compromised.

How long we keep it

We keep account holder information for as long as the account is open. Proposals, and the acceptance records attached to them, stay in the account until the account is closed as described below. Unpaper doesn't offer a separate control that deletes one proposal on its own.

Closing an account starts in Settings. The request waits 30 days, and the owner can cancel it until then. Nothing is deleted during those 30 days. After that, we delete drafts and proposals that were never accepted, together with that workspace's business settings, templates, library sections, team memberships, invites and email records. Links for those proposals stop working. Copies may remain in a provider's backups until that backup expires. We don't set a separate 30-day backup clock of our own.

Accepted proposals are kept. We keep each accepted proposal, its acceptance record (the name typed, the email address the proposal was sent to, the date and time, the IP address, the city and the version accepted) and the accepted PDF. We store a retention date of 7 years from the acceptance. Nothing in the product deletes those records when that date passes. We keep them because they're a record of an agreement between the account holder and their client, and either of them may need to rely on it later, for example to settle a dispute or defend a legal claim. We don't use them for marketing. When the deletion is completed, the public page and the PDF download for that workspace stop. The client, or the former account holder, can still ask us for a copy.

Keeping these records is consistent with the Australian Privacy Principles. They're kept for the same purpose they were collected for, to record that an agreement was made, which is a purpose both parties would reasonably expect. The Privacy Act also allows information to be used to establish, exercise or defend a legal claim. Proposals that were never accepted aren't records of an agreement, so we don't keep them after the account is closed.

We also keep the billing record for the workspace, including the Stripe customer and subscription ids, for tax and accounting. We don't delete that record on a timer.

If this workspace was the owner's only one, we delete their Clerk user and replace the name and email on the Unpaper account so they no longer identify the person. We also add that email address to a suppression list so we don't email it about proposals. If the owner still belongs to another workspace, we don't delete the Clerk user, and we don't complete the deletion until that other membership is gone. Other members keep their own logins. They lose this workspace.

Rate limiting data is kept only for as long as the limit needs it. We don't keep a separate analytics store.

Accessing and correcting your information

You can ask us for a copy of the personal information we hold about you, and ask us to correct it if it's wrong, out of date or incomplete. Account holders can update most of their details directly in Unpaper's settings.

To make a request, email hello@usefulmachines.com.au. We'll need to confirm who you are before we act on it, and we'll respond within 30 days. We don't charge for making a request. If we refuse a request, we'll explain why in writing and tell you how to complain.

If you're a client and your information is in an account holder's proposal, we may pass your request to the account holder, because they control that content. We can't change the details of an acceptance record, such as the name typed and the time, because it's a record of what happened. If the account holder has closed their account, you can still ask us for a copy of a proposal you accepted, and its acceptance record, for as long as we keep it.

Deleting your information

To close your account, the owner goes to Settings and requests account deletion. The request waits 30 days, and it can be cancelled from Settings until the deletion date. If you can't get into your account, email us at hello@usefulmachines.com.au and we'll do it for you once we've confirmed who you are. If the workspace is on Pro, cancel the subscription before the deletion is completed. We won't finish the deletion while that subscription is still active.

When the deletion is completed, we remove the account details, business details, drafts and proposals that were never accepted, as described in the section on how long we keep information. Accepted proposals, their acceptance records and the accepted PDFs are kept. We'll still give you a copy if you ask. Download any accepted proposal PDFs you want before you delete the account, because the public download stops once the deletion is completed.

If you're a client and you'd like your information deleted, please contact the account holder who sent you the proposal, or contact us and we'll work with them. If you accepted a proposal, we keep the record of that acceptance, because the account holder may need it as evidence of your agreement. We'll explain this if it applies, and we'll delete anything we don't need to keep.

If you're outside Australia

If the GDPR or a similar law applies to you, you have rights over your personal information. You can ask to access it, correct it, delete it, restrict or object to how we use it, or receive a copy in a portable format. Where we rely on your consent, including for marketing emails, you can withdraw it at any time. Some rights, such as deletion, may be limited where we need to keep a record of an accepted proposal to establish or defend a legal claim, and we'll tell you if that applies. To exercise any of these rights, email us at hello@usefulmachines.com.au. You also have the right to complain to the data protection authority in the country where you live or work.