Effective date: July 22, 2026
1. Scope
This Privacy Policy explains how Paragraph Technologies Inc. ("Paragraph," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our websites, applications, publishing and hosting tools, newsletters, AI agents, automations, analytics, integrations, developer tools, and related services (collectively, the "Services").
This policy applies to people who create or manage a Paragraph account or workspace, visit a Paragraph-operated website, interact with us, or read or subscribe to a publication that uses Paragraph. It does not govern a third-party site or service that has its own privacy policy.
Paragraph's role
Paragraph is the controller or business responsible for personal information used to operate our own accounts, websites, product, analytics, billing, security, and communications.
Publications and workspace customers decide why and how to use subscriber, customer, and connected-service data in their workspace. For that data, the publication or customer may be the controller or business, and Paragraph may act as its processor or service provider. If your question concerns a specific publication's use of your information, contact that publication first. We will support it in responding where required.
2. Information we collect
The information we collect depends on how you use Paragraph, which features you enable, and what you choose to provide.
Account and workspace information
We collect identifiers and profile information such as your name, email address, account ID, login method, profile image, publication or company name, role, team membership, and settings. If you use a crypto wallet to sign in or use a related feature, we may receive the wallet address and authentication status. A public blockchain address and its transactions may be visible to anyone.
Content, prompts, files, and agent context
We collect the content you provide to the Services, including prompts, conversations, files, drafts, posts, pages, newsletters, images, videos, websites, comments, subscriber lists, goals, brand and social voice, notes, agent memory, approvals, feedback, and support requests. This material may contain personal information about you or other people.
We also collect outputs, tool calls, scheduled tasks, action history, usage and credit records, and other information generated when an agent or automation works for you.
Connected-service information
If you connect a third-party service, we receive information needed to establish and maintain the connection, such as account identifiers, profile details, workspace or channel information, access tokens, and the permissions you grant. We also process information the connected service makes available and that you ask Paragraph to read, create, update, or publish. This can include social posts, messages, pages, documents, issues, repositories, analytics, and other service content.
Subscriber, reader, and audience information
When someone subscribes to or interacts with a publication, we may collect their email address, name, wallet address, subscription status, signup source, consent and unsubscribe records, payment or membership status, comments, referrals, and interactions with publication websites and emails. Email interaction data may include delivery, bounce, complaint, open, and click events.
Billing and transaction information
We collect billing contact details, plan and subscription information, invoices, payment status, transaction identifiers, and limited payment method details, such as card brand and last four digits, that our payment processor makes available. Payment card numbers are provided directly to our payment processor, and Paragraph does not store full card details.
Usage, device, and analytics information
We automatically collect information about how you use the Services. This may include IP address, browser and device type, operating system, approximate location inferred from IP, language, pages and features used, referring page, dates and times, session and account identifiers, clicks, resource performance, error and diagnostic data, and campaign or referral parameters.
We use cookies, local storage, pixels, and similar technologies for authentication, security, preferences, analytics, attribution, and product performance. Our error-monitoring tools may sample session interactions to help us reproduce problems. User-entered text is masked by default in those replays.
Information from other sources
We may receive information from authentication, hosting, analytics, payment, communications, and integration providers; from teammates who invite you to a workspace; and from publicly available sources when you or an agent asks the Services to perform research.
3. How we use information
We use personal information to:
• provide, personalize, maintain, and support the Services;
• authenticate accounts, manage teams and permissions, and secure workspaces;
• process prompts and files, generate outputs, preserve agent context, run scheduled tasks, and carry out approved or authorized actions;
• host and publish websites and content, deliver newsletters, manage subscribers, and measure audience and content performance;
• connect the Services with third-party accounts and tools you choose;
• process payments, subscriptions, credits, refunds, and related records;
• respond to support requests and communicate about accounts, agent activity, product changes, security, and policies;
• understand how the Services are used, diagnose errors, evaluate system and model performance, and develop or improve features;
• prevent spam, fraud, abuse, security incidents, and violations of our terms and policies;
• comply with law, enforce agreements, and protect the rights and safety of Paragraph, our customers, readers, and others; and
• send product news or marketing where permitted by law. You can opt out of marketing email at any time.
We may aggregate or de-identify information so it can no longer reasonably identify a person. We may use and disclose that information for any lawful purpose and will not try to re-identify it except to test our de-identification methods.
4. AI processing and automations
When you use an AI feature, Paragraph may send relevant prompts, conversations, files, publication context, connected-service data, and other instructions to AI model, search, image, code-execution, or agent infrastructure providers. Those providers process the information to return results or perform the task for Paragraph.
We try to send only the information reasonably needed for the requested feature, but what is needed depends on your request and configuration. For example, an agent drafting in your voice may use prior posts and brand notes, while an agent asked to summarize a connected document may send the relevant document content to a model provider.
Enabled automations can cause processing and external actions while you are not actively using Paragraph. Review your automations, memory, and connections regularly. Don't provide sensitive or confidential information unless you are authorized to use it with the Services and it is necessary for the task.
Paragraph's agents help create, analyze, and distribute content. They are not intended to make solely automated decisions that produce legal or similarly significant effects about individuals.
5. How we disclose information
We may disclose personal information to the following recipients:
• Service providers. Companies that provide cloud hosting, databases, authentication, AI models, agent infrastructure, search, file storage, email delivery, analytics, error monitoring, customer support, security, and payment processing.
• Workspace members. Owners, administrators, and other authorized members of a workspace, according to their roles and the workspace's settings.
• Public audiences and recipients. Anyone who can access content you publish publicly, and the recipients or channels you choose when sending or distributing content.
• Connected services. Third-party tools and accounts you connect or direct Paragraph to use.
• Publication owners. The publication a reader visits, subscribes to, pays, or interacts with, including its authorized team members.
• Professional advisers. Lawyers, accountants, auditors, insurers, and other advisers bound by appropriate obligations.
• Authorities and affected parties. Courts, regulators, law enforcement, service providers, or others when we reasonably believe disclosure is required by law or needed to protect rights, safety, security, and the integrity of the Services.
• Business transaction participants. Actual or potential parties and advisers involved in a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections.
• Others at your direction. Other recipients when you ask us to disclose information or give us consent.
We don't use Customer Content or connected-service content to serve third-party targeted advertising.
6. Cookies, analytics, and tracking choices
Paragraph uses first-party and service-provider technologies to keep you signed in, remember preferences, prevent abuse, measure product usage, attribute signups, monitor performance, and diagnose errors. Our current analytics and monitoring providers include PostHog, Datadog, Amplitude, and Sentry. We also use Google Tag Manager and Google Analytics for website and product measurement.
You can control cookies through your browser and can clear locally stored data. Blocking necessary storage may prevent parts of the Services from working. Some browsers offer a "Do Not Track" setting, but there is no uniform standard for interpreting it, so the Services do not currently respond to that signal. Where applicable law requires us to recognize a universal opt-out signal, we will do so for the processing covered by that signal.
7. Legal bases for processing
If data protection law in the European Economic Area, United Kingdom, or a similar jurisdiction applies, we process personal information under one or more of these legal bases:
• Contract. Processing needed to provide the Services you request and administer our agreement with you.
• Legitimate interests. Operating, securing, supporting, analyzing, and improving the Services; communicating with customers; and preventing fraud and abuse, where those interests are not overridden by your rights.
• Consent. Processing you have agreed to, such as certain marketing communications or optional connections. You may withdraw consent at any time, without affecting earlier processing.
• Legal obligations and vital interests. Processing needed to comply with law or protect someone's life, safety, or rights.
When Paragraph processes personal information solely on a customer's behalf, that customer determines the applicable legal basis.
8. Retention
We keep personal information only as long as reasonably necessary for the purposes described in this policy. Retention depends on the type of information, whether an account or workspace is active, the feature that created the information, contractual requirements, safety and fraud risks, backup cycles, and legal obligations.
When you delete a workspace or account, we begin deleting associated information from active systems, subject to any controls available in the product. Some information may remain for a limited time in backups or be retained where needed for legal compliance, security, fraud prevention, billing, disputes, or enforcement. Content published or sent outside Paragraph may remain with recipients, connected services, search engines, archives, or others who copied it.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. Protect your login methods, review workspace access, and use care when granting an agent or connected service permission to act.
10. International transfers
Paragraph is based in the United States. We and our service providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use lawful transfer mechanisms and safeguards for international transfers, such as standard contractual clauses.
11. Your choices and privacy rights
You can update many account, publication, permission, connection, and communication settings in the Services. You can export subscriber data and can delete a workspace or account through available settings. Newsletter recipients can unsubscribe using the link in the email. Marketing recipients can opt out without affecting transactional or service messages.
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; and to appeal a denied request. You may also have the right to complain to your local data protection authority.
To exercise a privacy right, email support@paragraph.com. Tell us what you are requesting and how you interact with Paragraph. We may need to verify your identity and authority before completing the request. You may use an authorized agent where the law permits. We will not discriminate against you for exercising a privacy right.
California privacy notice
The categories described in Section 2 correspond to identifiers; customer records; commercial information; internet or other electronic network activity; geolocation at an approximate level; audio, visual, and other electronic information; professional or employment-related information; sensitive personal information you choose to provide; and inferences drawn from that information. We collect them from you, your organization, readers and subscribers, connected services, service providers, devices, and public sources. We use and disclose them for the business and commercial purposes described in Sections 3 through 6.
Paragraph does not sell personal information for money. We also do not share personal information for cross-context behavioral advertising as those terms are defined by California law. We do not knowingly sell or share the personal information of anyone under 16. We use sensitive personal information only to provide the Services, maintain security, prevent fraud, comply with law, or for other purposes California law does not treat as a right-to-limit use.
12. Children's privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has provided personal information to Paragraph, contact support@paragraph.com so we can review and delete it where appropriate.
13. Third-party services and publication policies
Third-party sites, connected services, payment providers, and publications may collect and use information under their own privacy policies. A publication may also add its own analytics or other tracking tools to its website. Review those policies before connecting an account, making a payment, or providing information. Paragraph is not responsible for their independent privacy practices.
14. Changes to this policy
We may update this policy as the Services, laws, and our practices change. We will post the updated policy and revise the effective date above. If a change is material, we will provide reasonable notice through the Services, by email, or another appropriate method.
15. Contact us
Questions or requests about this Privacy Policy can be sent to support@paragraph.com.
