Privacy Policy

PasteVite ("we", "our", or "us") is the data controller responsible for your personal data collected through the PasteVite iOS application and this website.

Contact: privacy@pastevite.app

We do not currently have a designated Data Protection Officer (DPO), as we are a small-scale data processor. You may direct any privacy enquiries to the contact above.

We only collect data that is strictly necessary. The table below sets out each category of data, the purpose, and the legal basis under GDPR Article 6.

The PasteVite keyboard extension reads only the snippet data you have saved within the app. It does not log, store, or transmit any keystrokes or text entered in other applications. We have no access to anything you type on your iOS device.

The keyboard extension operates with "Allow Full Access" disabled by default. This means it is technically prevented from sending any data over the network. If you choose to enable full access, no keystroke data is ever collected or transmitted.

PasteVite writes to your clipboard only when you explicitly tap a snippet button. The App never reads clipboard contents from other apps, monitors your clipboard in the background, or transmits clipboard data to any server.

If you enable iCloud sync, your snippet data is stored in your personal iCloud account under your Apple ID. Apple acts as a data processor on your behalf. We do not have access to your iCloud-stored data.

[GDPR] International transfers: Apple may store and process iCloud data on servers located outside the EEA, including in the United States. Apple relies on Standard Contractual Clauses (SCCs) and other safeguards approved by the European Commission for such transfers. See Apple's Privacy Policy for details.

We do not transfer your personal data to any other country or international organisation.

We retain personal data only for as long as necessary:

• Snippet data: Stored on your device and deleted when you delete the app. iCloud copies are deleted when you remove the app data from iCloud.
• Support emails: Retained for up to 2 years after your last communication, then permanently deleted.
• Crash reports: Anonymised data is retained for up to 12 months for debugging purposes.

We do not sell, rent, or trade your personal data to any third party. We do not share personal data with advertisers.

We may disclose personal data only in the following limited circumstances:

• Apple Inc. — as our App Store and iCloud provider (data processor), subject to Apple's Data Processing Addendum.
• Legal obligations: Where we are required by law, court order, or regulatory authority to disclose information.
• Vital interests: Where necessary to protect the vital interests of any person.

[GDPR] If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten"), where there is no overriding legitimate reason to retain it.
• Right to restriction (Art. 18): Request that we limit the processing of your data in certain circumstances.
• Right to data portability (Art. 20): Receive your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object (Art. 21): Object to processing based on legitimate interests. We will stop unless we demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Rights re: automated decision-making (Art. 22): We do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, email us at privacy@pastevite.app. We will respond within 30 days. We may need to verify your identity before processing your request.

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data lawfully. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may contact the ICO. We encourage you to contact us first so we can resolve any concern directly.

PasteVite is not directed to children. The minimum age to use the App is 13 years (or 16 years in EU member states where the national age of digital consent is higher than 13). We do not knowingly collect personal data from children below the applicable minimum age.

If you believe a child below the minimum age has provided us with personal data, please contact us at privacy@pastevite.app and we will delete it promptly.

We implement appropriate technical and organisational measures (TOMs) to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encryption of data in transit, access controls, and regular security reviews.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay as required by GDPR Article 34.

The PasteVite iOS app does not use cookies. This website may use strictly necessary cookies required for it to function. Any non-essential cookies (e.g., for analytics) will only be set with your explicit consent, in accordance with the EU ePrivacy Directive and GDPR.

We use the following third-party services:

• Apple iCloud — optional data sync. Governed by Apple's Privacy Policy.
• Apple App Store — app distribution and in-app purchases, governed by Apple's Privacy Policy.
• Vercel — website hosting. Vercel may collect anonymised server logs. See Vercel's Privacy Policy.

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice by updating the "Last updated" date and, where feasible, by in-app notification. Continued use of the App after the effective date of changes constitutes your acknowledgement of the updated policy.

For any privacy-related questions, to exercise your rights, or to raise a concern:

• Email: privacy@pastevite.app

We aim to respond to all requests within 30 days. If your request is complex or you have made multiple requests, we may extend this period by a further two months, in accordance with GDPR Article 12(3).