Legal
Data Processing Agreement
Terms for customers who process personal data through Paper Flight as a data processor.
Last updated: May 2026
Scope
When you use Paper Flight to store or process personal data about your customers, employees, or contacts, you are the data controller and Paper Flight acts as a data processor on your instructions.
Processor obligations
We process personal data only to provide the service, implement appropriate safeguards, and assist with data subject requests where required.
- Process data only on documented instructions
- Ensure personnel confidentiality
- Assist with security and breach notification obligations
- Delete or return data upon termination where applicable
Subprocessors
We use vetted subprocessors for hosting, email delivery, payments, and messaging. A list is available on request.
Executing a DPA
Business customers may request a signed DPA by contacting support@paperflight.cc.
Ready to get started?
Compare plans, start a free trial, or talk to our team about a custom setup.