Who we are
Pasteful is operated by Max Robson, a UK sole trader trading as Lunara Technologies. For privacy questions or to exercise your data rights, email privacy@pasteful.app. For product or billing support, email support@pasteful.app.
Your documents stay on your device
Markdown parsing, cleanup, the AI cleanup diff, previews and destination conversion run in your browser. Pasteful does not upload your document or clipboard text to its servers, use it to train models, or include it in account, billing or analytics requests.
Clipboard writes happen only after you choose a copy or download action. A rich copy may contain both plain-text and HTML versions so the destination can choose the format it supports.
Data saved on this device
Pasteful may save your current draft, source and destination choices, cleanup preferences, preview preference, monthly free-use count, installation identifier and paid-access certificate in browser storage. If you start a purchase, the browser also stores the pending purchase details and a private recovery key. The server stores only a protected one-way digest of that key.
This information stays on the device unless an account or billing action needs the limited metadata described below. You can remove local data through your browser settings. Clearing it can remove a saved draft, preferences and recovery material, and may require you to restore paid access.
Accounts and payments
If you create an account, Clerk processes the identity and sign-in information needed for Google sign-in or an email-based account. Pasteful receives your Clerk account identifier, display name and email address. We use this information to sign you in, protect paid access and help you recover your account.
If you buy a plan, Stripe processes your payment details, tax location and transaction. Pasteful does not receive or store your full card number. We store the account, plan, purchase status, Stripe customer and transaction references, installation identifier, device name, device activity and entitlement metadata needed to provide access, prevent duplicate charges, manage refunds and disputes, and support you. Document and clipboard contents are never part of these requests.
Why we use account data
We use account, device and purchase data where it is necessary to create or perform your contract with Pasteful, including sign-in, checkout, licence delivery, recovery and billing management. We use transaction records where necessary to meet tax, accounting and consumer-law obligations. We use limited security and event records for our legitimate interests in preventing fraud, enforcing device limits, securing accounts and avoiding duplicate billing.
Pasteful does not sell personal information and does not use it for advertising, profiling or automated decisions that have legal or similarly significant effects.
Service providers and international processing
Netlify hosts the website, functions and account database. Clerk provides authentication. Stripe provides checkout, tax and billing. Google provides the optional Google sign-in route. Pasteful sends these providers the account or payment information needed for those services, not your document or clipboard text.
These providers may process personal information outside the UK. Email privacy@pasteful.app for current information about processing locations and the transfer safeguards that apply to your information.
How long we keep data
Local browser data remains until you clear it or Pasteful replaces it as part of normal use. Account and device records are kept while your account or paid access is active, and until they are no longer needed for recovery, security or support. Revoked credentials stop working when they are revoked, although signed offline access can remain valid until its stated expiry.
Purchase, refund, dispute and tax records are kept for as long as needed to provide the licence, resolve payment issues and meet legal, accounting and tax obligations. Security and payment-event records are kept only for as long as needed to prevent duplicate processing, investigate abuse and defend legal claims. You may ask us to delete data that we no longer need to keep.
Cookies and analytics
Pasteful uses essential browser storage and cookies for sign-in, security, account sessions and paid access. These are needed for features you request. The web app does not currently load advertising, behavioural analytics or tracking pixels, so there is no non-essential analytics consent banner.
If we add non-essential analytics later, we will update this notice and add any consent controls required before enabling it. Document text, clipboard contents, filenames and content hashes will not be sent to analytics.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or receive a copy of your personal information. You can also withdraw consent where consent is the basis for processing. Email privacy@pasteful.app to make a request. We may need to verify that the request relates to your account.
You can complain to the UK Information Commissioner’s Office at ico.org.uk. Please contact us first if you can, so we have the opportunity to put things right.
Your right to object
You may have the right to object when we use personal information for our legitimate interests. Email privacy@pasteful.app and explain what you object to. We will stop that use unless we have a lawful reason to continue.
Changes to this notice
We will date material changes on this page and explain them before a new use of personal information begins. This notice covers the current Pasteful web service; future mobile or Mac apps will receive updated disclosures before launch if their data handling differs.