PayAppCheck

Last updated: July 27, 2026

This Privacy Policy explains how Ludvig Bergerud, a sole trader (enskild firma) registered in Sweden and operating PayAppCheck (payappcheck.com) ("we", "us", "our"), collects, uses, and protects information when you use the Service. We are the data controller for the information described in this Policy. Our registered business address is Lilla Bergaliden 1, 252 23 Helsingborg, Sweden. Contact us about privacy at [email protected].

We use information to: provide, operate, and secure the Service; extract data and perform calculations on your uploaded documents; generate Excel/CSV/JSON output; manage your account, subscription, and support requests; detect and prevent fraud and abuse; comply with legal obligations; and improve and maintain the Service. Where the GDPR applies, our legal bases include performance of our contract with you, our legitimate interests in operating and securing the Service, and compliance with legal obligations.

4.1 Retention of uploaded source documents. Your uploaded source documents (the original PDFs/scans) are automatically deleted within 7 days by default. You can change this in your account settings: from "delete immediately after processing" or 24 hours, up to a maximum of 30 days. We do not retain your uploaded source documents indefinitely.

4.2 Retention of extracted results and history. The extracted data, reconciliation results, and output associated with your account are retained for 90 days by default, after which they are automatically deleted. You can change this in your account settings: from 30 days up to a maximum of 1 year. We do not retain processed results indefinitely. You can export your data at any time before it is deleted.

4.3 You control your retention periods. You can adjust both retention windows above at any time in your account settings. Changes apply going forward and to data already stored, so shortening a window also removes older data on our next scheduled cleanup.

4.4 Data storage location. Customer Data is stored on servers located in the United States.

4.5 No AI training on customer documents. We do NOT use customer documents or Customer Data to train artificial-intelligence or machine-learning models. Our data-extraction sub-processor processes your documents only to return the extracted data to us, under API terms that prohibit using your content to train its models, and we do not enable any data-sharing or model-improvement option for your content.

4.6 Account data retention. We retain account information for as long as your account is active and for a reasonable period afterward as needed to comply with legal, tax, accounting, and dispute-resolution obligations, after which it is deleted or anonymized.

We share information only as needed to operate the Service, with the following sub-processors:

If you connect an integration that sends data to a destination you control (for example Slack notifications or webhooks to your own endpoints), we transmit the relevant data (such as document summaries or extracted results) to the destination you configured. Those services act on your instructions and are governed by your agreements with them, not by this Policy.

We may also disclose information where required by law, to enforce our Terms, or to protect rights, safety, and security. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising.

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to restrict or object to certain processing. California residents (under the CCPA as amended by the CPRA) have the rights to know, to delete, to correct, to opt out of the sale/sharing of personal information (note: we do not sell or share your information), and to limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights. EU/EEA/UK residents have rights under the GDPR/UK GDPR, including the right to lodge a complaint with a supervisory authority. To exercise any right, contact [email protected]; we will verify your request and respond as required by applicable law.

We use strictly necessary cookies to operate the Service (for example, to keep you logged in). We do not currently use third-party analytics or advertising trackers; if we introduce analytics in the future, we will update this Policy first. You can control cookies through your browser settings; disabling some cookies may affect functionality.

We use reasonable administrative, technical, and organizational measures to protect information, including encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, where required, notify you.

[email protected], or by post to Ludvig Bergerud, Lilla Bergaliden 1, 252 23 Helsingborg, Sweden. For payment-related data handled by Paddle, see paddle.com/legal/privacy.