# Privacy Policy

Last updated: September 30, 2026

This Privacy Policy explains how Pairio ("we", "us", "our") collects, uses, and protects your personal data when you use Pairio ("Service").

We are committed to protecting your privacy and aim to be transparent about our data practices.

## 1. Data Controller

- **Company:** Pairio
- **Location:** The Netherlands
- **Email:** [hello@pairio.app](mailto:hello@pairio.app)

## 2. Data We Collect

### 2.1 Account Data

When you create an account, we collect:

- Email address
- Name (if provided)
- Password (stored securely hashed, never in plain text)
- Contact list and connection information
- Two-factor authentication settings (if enabled)

### 2.2 Billing Data

Payment processing is handled by Stripe. We receive and store:

- Stripe customer ID
- Subscription status and plan information
- Payment history and transaction records
- Last four digits of payment card (for display purposes only)

We do not store full credit card numbers. All sensitive payment data is handled directly by Stripe in accordance with PCI-DSS standards.

### 2.3 Session Data

To provide the screen sharing Service, we may collect:

- Session duration and connection metadata
- Network quality metrics
- Feature usage (drawing, remote control, voice)

Screen sharing streams are peer-to-peer and end-to-end encrypted. We do not record or store screen content.

### 2.4 Technical and Security Data

- IP addresses
- Browser type and version
- Device information
- Login timestamps and session data

### 2.5 Analytics Data (with consent)

If you consent to analytics cookies, we use Google Analytics (GA4) to collect:

- Page views and navigation patterns
- Feature usage events
- Approximate geographic location (country/region level)
- Device and browser categories

We do not use advertising or remarketing cookies. Analytics are only loaded after you provide consent.

## 3. How We Use Your Data

| Purpose | Legal Basis |
| --- | --- |
| Providing the screen sharing Service | Contract performance |
| Managing your account and subscription | Contract performance |
| Processing payments | Contract performance |
| Security monitoring and fraud prevention | Legitimate interest |
| Service improvement and debugging | Legitimate interest |
| Analytics and usage statistics | Consent |

## 4. Data Sharing

We share data with the following service providers:

| Provider | Purpose |
| --- | --- |
| Stripe | Payment processing |
| Google Analytics | Website analytics (with consent only) |
| Cloudflare | CDN, DDoS protection, and DNS |
| Sentry | Error tracking and application monitoring (EU) |
| Hetzner | Infrastructure and data storage (EU) |

We do not sell your personal data to third parties.

## 5. Data Retention

| Data Type | Retention Period |
| --- | --- |
| Account data | Duration of account + 30 days after deletion |
| Google account link and calendar event IDs | Duration of account + 30 days after deletion |
| Session metadata | Duration of subscription + 90 days |
| Billing records | 7 years (legal requirement) |
| Security logs | 12 months |
| Analytics data | Per Google Analytics default (14 months) |

## 6. Security

We protect your data with the following measures:

- Encryption of data in transit (TLS/HTTPS)
- End-to-end encrypted screen sharing
- Secure password hashing
- Two-factor authentication option
- Regular security assessments
- Access controls and audit logging

## 7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

- **Access:** Request a copy of your personal data
- **Rectification:** Request correction of inaccurate data
- **Erasure:** Request deletion of your data
- **Restriction:** Request limitation of processing
- **Portability:** Request your data in a machine-readable format
- **Objection:** Object to processing based on legitimate interests
- **Withdraw consent:** Withdraw previously given consent at any time

To exercise these rights, contact us at [hello@pairio.app](mailto:hello@pairio.app). We will respond within 30 days.

## 8. Cookies and Analytics

### Strictly Necessary Cookies

- **Session cookie:** Maintains your logged-in state
- **Security cookie:** Protects against cross-site attacks
- **Cookie consent:** Remembers your cookie preferences
- **Sign-in memory:** Records that an account has signed in on this browser, so we offer you the sign-in page rather than the sign-up page. It stores no information about who you are.

### Analytics Cookies (Consent Required)

With your consent, we use Google Analytics (GA4). We do not use advertising or remarketing cookies.

### Managing Your Preferences

You can manage cookies via the consent banner on first visit, the "Cookie settings" link in the footer, or your browser settings.

## 9. Google User Data

Pairio connects to Google in two optional ways: signing in with Google, and the Pairio add-on for Google Calendar. This section explains what Google user data each one gives us and what we do with it.

### 9.1 Sign in with Google

When you choose "Continue with Google", Google shares your name, email address, whether Google has verified that address, and your profile picture. We use them to sign you in, or to create your account with your name and photo already filled in. We keep them as part of your account data (section 2.1).

### 9.2 Google Calendar add-on

When you pick Pairio as the video conferencing for a Google Calendar event, the add-on sends us:

- Your Google account ID and email address, and whether Google has verified that address
- The ID of that calendar event

We use them to find your Pairio account and create a Pairio meeting link for that event. The first time, we match the verified email address to your Pairio account, and from then on we recognise you by your Google account ID. The event ID lets us give the event the same link if Calendar asks again.

The add-on does not read the event's title, time, description, location or guests, and never sees any other event in your calendar. It does not access Gmail, Drive, your contacts or any other Google data.

### 9.3 Storage, sharing and deletion

- **Storage:** We store your Google account ID and email address, and each event ID next to the meeting it created, on our servers in the EU.
- **Sharing:** We do not sell Google user data, use it for advertising, or share it with anyone, except the hosting providers in section 4 that run Pairio for us, or where the law requires it.
- **AI:** We do not use Google user data to develop, improve or train generalized AI or machine learning models.
- **Deletion:** Deleting your Pairio account deletes this data with the rest of your account (section 5). To remove only the link between your Google and Pairio accounts, email [hello@pairio.app](mailto:hello@pairio.app). You can revoke Pairio's access to your Google account at any time at [myaccount.google.com/permissions](https://myaccount.google.com/permissions).

Pairio's use and transfer to any other app of information received from Google APIs will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

## 10. Contact Us

- **Email:** [hello@pairio.app](mailto:hello@pairio.app)
- **Address:** The Netherlands