Privacy Policy

Last updated: 24 October 2026

This policy explains what personal data PaperNote (papernote.in), operated by AgenticVerse, collects, why, and the choices you have. It is written to follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

PaperNote is a direct digital marketplace tool owned and maintained by AgenticVerse (Micro enterprise registered under MSME (Udyam), Udyam Registration No. UDYAM-OD-04-0015529), proprietor Jagatmohan Padhan. For the purposes of the DPDP Act, AgenticVerse is the Data Fiduciary for the data creators and buyers give to PaperNote.

1. Who this covers

• Creators who sign in to the PaperNote app to sell study notes.
• Buyers who purchase notes from a creator's store on our website.

2. Data we collect

Creators:

• Google account email and name, received when you sign in with Google. We never see your Google password.
• Store details: store name, link, description, theme and logo.
• Payout details you add so buyers can pay you: UPI ID and, if you choose, bank account number and IFSC. The bank account number is stored encrypted and shown only in masked form.
• Product details and the PDFs, Google Drive links and screenshots you upload.
• Optionally, a personal Google key you paste in Settings. It is stored encrypted, is never shown again, and is used only to run payment checks and listing drafts for your store.

Buyers:

• Email address and name entered at checkout, used to deliver the notes and, when the creator has enabled it, to print the buyer email on a downloaded PDF as an anti-piracy watermark.
• Payment reference (UTR) and the payment screenshot you upload as proof.

Technical data: device type, app version, IP address and basic logs needed to keep the service secure and working. We do not collect your card numbers, UPI PIN or net-banking credentials. Payments go from the buyer directly to the creator.

3. How we use it

• To run accounts, stores, orders and downloads.
• To show a creator the payment proof for an order so they can approve it.
• To check automatically whether an uploaded payment screenshot matches the order, using a Google reading service (see section 5). The result is a suggestion to the creator; for small orders where the creator has switched on auto-approve it can unlock the download.
• To send order, download and account emails.
• To prevent fraud and abuse, and to meet legal obligations.

4. Legal basis

We process data with your consent (for example, when you sign in or place an order), to perform the service you asked for, and to meet legal obligations. You can withdraw consent by deleting your account.

5. Who we share data with

• The creator you buy from receives your name, email, order details and payment proof.
• Service providers that run the platform on our behalf: cloud hosting and database, file storage, email delivery, Google (sign-in, and screenshot reading for payment checks) and Google Play (subscriptions). They may process data only to provide their service.
• Authorities when required by law or a valid legal order.

We do not sell personal data. Payment screenshots sent for automatic checking are used only to produce the check result.

6. Retention

• Payment screenshots are kept in a limited storage buffer. When it fills, older proofs for completed orders may be cleared automatically. Open orders are never cleared.
• Order records are kept as long as needed for accounting, disputes and legal compliance.
• When a creator deletes their account, their store, products, files and payout details are removed. Records we must keep by law may be retained in minimal form.

7. Security

Data is sent over HTTPS. Sensitive secrets (bank account number, personal Google key) are encrypted at rest. Access to production data is restricted. No system is perfectly secure; if a personal data breach affects you we will notify you and the Data Protection Board as the law requires.

8. Your rights

You may ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. Creators can delete their account from Settings in the app. Buyers can write to agenticversestudio@gmail.com. You can also use our Grievance Officer.

9. Children

The service is meant for users aged 18 and over. A student under 18 should buy only with a parent or guardian's consent and involvement.

10. Changes

We may update this policy. The date above shows the latest version; material changes will be announced in the app or by email.

11. Contact

AgenticVerse, Flat/Door 3, School Area, Dangbahal, Gaisilat, Bargarh, Odisha 768037, India. Email: agenticversestudio@gmail.com.