Privacy Policy

Paul9 is operated by Wisepunk LLC.

30 N Gould St Ste N
Sheridan, WY 82801
United States

For privacy-related requests, contact us at rene@wisepunk.com.

We do not access private direct messages on any connected platform.

• Provide, operate, and improve the Paul9 platform
• Generate marketing content, landing pages, and analytics insights using AI
• Process payments and manage your subscription
• Analyze market signals and competitor positioning on your behalf
• Track link clicks and landing page performance
• Send transactional emails (welcome messages, job completion notifications)
• Prevent fraud and abuse
• Communicate product updates and service changes

We do not sell your personal data. Ever.

If you are located in the EU or UK, we process your data under the following legal bases:

• Contractual necessity — to provide the service you signed up for
• Legitimate interest — to improve our product, prevent abuse, and provide analytics
• Consent — for optional marketing communications
• Legal compliance — to meet applicable legal obligations

We share data only with service providers necessary to operate Paul9:

• Stripe — payment processing and subscription management
• Clerk — authentication and identity management
• Vercel — hosting, deployment, and file storage
• Neon — database hosting (PostgreSQL)
• OpenRouter — AI language model processing
• Google (Gemini) — image and visual analysis
• Firecrawl — website scraping and content extraction
• DataForSEO — search volume and keyword research
• Resend — transactional email delivery
• Social platforms — when you explicitly connect accounts (e.g., X/Twitter)

We do not sell user data to any third party.

• Account data is retained for as long as your account is active
• When you delete your account, we remove your personal data within 30 days
• Backups may retain data for up to 90 days after deletion before being purged
• Anonymized, aggregated data may be retained indefinitely to improve the service
• Billing records are retained as required by applicable tax and accounting regulations

• All data transmitted over HTTPS (encryption in transit)
• Sensitive credentials (API keys, OAuth tokens) encrypted at rest using AES-256-GCM
• Passwords hashed — never stored in plaintext
• Access to production systems restricted to authorized personnel only
• Database hosted on infrastructure with SOC 2 compliance

No system is 100% secure. We implement commercially reasonable measures to protect your data but cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Object to certain processing
• Withdraw consent for optional processing

To exercise any of these rights, email rene@wisepunk.com. We will respond within 30 days.

• Essential cookies — required for authentication and session management (via Clerk)
• Analytics — we track page views, clicks, and conversions on published landing pages to provide you with performance insights
• Link tracking — shortened links (p9.fyi) record click data including referrer and browser information

We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

Paul9 is based in the United States. Our infrastructure, databases, and service providers are primarily located in the US. If you access Paul9 from outside the US, your data will be transferred to and processed in the United States.

We rely on Standard Contractual Clauses and other lawful transfer mechanisms where required by applicable data protection law.

Paul9 may contain links to third-party websites and services. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by placing a notice on the Paul9 website. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.