Legal
Privacy Policy
Last updated 19 Oct 2026
1. Who We Are and This Policy
Paperflow is an educational platform intended to help students discover and access free past examination papers and revision resources for TEVETA, technical and vocational programmes, colleges, universities, and other examination boards.
This Privacy Policy explains how information may be collected, used, stored, shared, retained, and deleted when you visit or use Paperflow, create an account, use Google Sign-In where enabled, or contact us.
We aim to handle personal information transparently and in accordance with applicable Zambian law, including the Data Protection Act No. 3 of 2021, where applicable. The exact information processed depends on the features enabled in the live application.
Effective date: 17 October 2026.
Website: https://paperflow.kumoyotech.com
Privacy contact: everused69@gmail.com
This Privacy Policy explains how information may be collected, used, stored, shared, retained, and deleted when you visit or use Paperflow, create an account, use Google Sign-In where enabled, or contact us.
We aim to handle personal information transparently and in accordance with applicable Zambian law, including the Data Protection Act No. 3 of 2021, where applicable. The exact information processed depends on the features enabled in the live application.
Effective date: 17 October 2026.
Website: https://paperflow.kumoyotech.com
Privacy contact: everused69@gmail.com
2. Information We Collect
The information we collect depends on how you use Paperflow and the features available. It may include:
Account information: name, email address, account identifier, and information you submit during registration or when updating your profile.
Google Sign-In information: if Google Sign-In is enabled and you choose to use it, basic profile information made available by the permissions requested, such as name, email address, and profile picture where provided.
Communications: messages, questions, feedback, copyright notices, and support requests you send to us.
Usage and technical information: server logs and security information such as IP address, browser type, device or operating-system information, access timestamps, requested pages, and error records where these are collected by the application, hosting provider, or security tools.
Cookies and session information: information required to maintain login sessions, protect the website, and remember relevant settings, depending on the configuration.
We do not intentionally ask for information that is unnecessary for the feature you choose to use. Do not send us passwords, one-time codes, or sensitive personal information unless it is specifically required by law and we have provided a secure method.
Account information: name, email address, account identifier, and information you submit during registration or when updating your profile.
Google Sign-In information: if Google Sign-In is enabled and you choose to use it, basic profile information made available by the permissions requested, such as name, email address, and profile picture where provided.
Communications: messages, questions, feedback, copyright notices, and support requests you send to us.
Usage and technical information: server logs and security information such as IP address, browser type, device or operating-system information, access timestamps, requested pages, and error records where these are collected by the application, hosting provider, or security tools.
Cookies and session information: information required to maintain login sessions, protect the website, and remember relevant settings, depending on the configuration.
We do not intentionally ask for information that is unnecessary for the feature you choose to use. Do not send us passwords, one-time codes, or sensitive personal information unless it is specifically required by law and we have provided a secure method.
- Account information, such as name, email address, and account identifier, where an account is used.
- Google Sign-In profile information, such as name, email address, and profile picture where provided and requested.
- Messages, feedback, copyright notices, and support requests that you send to Paperflow.
- Technical and security logs, such as IP address, browser type, access times, and error information where collected.
- Essential cookie and session information, depending on the website configuration.
3. How Information Is Collected
We may collect information when you:
- browse or interact with Paperflow;
- create, sign in to, or update an account;
- choose Google Sign-In, if available;
- submit a contact form, report a copyright concern, or send a support message; or
- interact with security, session, or error-handling features.
Our hosting provider and technical service providers may generate server and security logs as part of operating the website. Where third-party services are enabled, they may collect information according to their own notices and policies.
- browse or interact with Paperflow;
- create, sign in to, or update an account;
- choose Google Sign-In, if available;
- submit a contact form, report a copyright concern, or send a support message; or
- interact with security, session, or error-handling features.
Our hosting provider and technical service providers may generate server and security logs as part of operating the website. Where third-party services are enabled, they may collect information according to their own notices and policies.
- Browsing or interacting with Paperflow.
- Creating, signing in to, or updating an account.
- Choosing Google Sign-In, if available.
- Submitting a contact form, support request, or copyright notice.
- Website hosting and security systems generating operational logs.
4. How We Use Personal Information
Depending on the features you use, we may process information to:
- provide and maintain Paperflow and its educational-resource features;
- create, identify, and manage user accounts;
- authenticate users and associate sign-in information with the correct account;
- respond to questions, feedback, rights-holder notices, and support requests;
- protect the website, prevent abuse, troubleshoot errors, and investigate security incidents;
- understand and improve reliability and usability using information available to us for that purpose; and
- comply with applicable laws, enforce our Terms, and establish or defend legal claims.
We do not state that we use analytics, advertising cookies, or marketing tools unless those tools are actually enabled. If our data practices change materially, we will update this policy and provide any notice or consent required by law or the applicable service policies.
- provide and maintain Paperflow and its educational-resource features;
- create, identify, and manage user accounts;
- authenticate users and associate sign-in information with the correct account;
- respond to questions, feedback, rights-holder notices, and support requests;
- protect the website, prevent abuse, troubleshoot errors, and investigate security incidents;
- understand and improve reliability and usability using information available to us for that purpose; and
- comply with applicable laws, enforce our Terms, and establish or defend legal claims.
We do not state that we use analytics, advertising cookies, or marketing tools unless those tools are actually enabled. If our data practices change materially, we will update this policy and provide any notice or consent required by law or the applicable service policies.
- Provide and maintain Paperflow and its educational-resource features.
- Create, identify, and manage user accounts.
- Authenticate users and associate sign-in details with the correct account.
- Respond to questions, feedback, rights-holder notices, and support requests.
- Protect the website, troubleshoot errors, and investigate security incidents.
- Comply with applicable law and enforce the platform Terms.
5. Google Sign-In and Google User Data
If Paperflow offers Google Sign-In, it is optional unless a feature clearly explains otherwise. When you choose it, Google may provide information permitted by the permissions requested and approved, such as your name, email address, and profile picture where available.
We use Google user data only for the user-facing sign-in and account functions disclosed in the application, such as authenticating you, creating or linking your Paperflow account, and displaying relevant account details. We do not sell Google user data, use it for targeted advertising, or use it for purposes unrelated to the disclosed functionality.
We may process or store the minimum Google-provided information needed to operate account features. Infrastructure or service providers may process data on our behalf where necessary to operate or secure the service. We do not share Google user data with advertising platforms or data brokers. Any other transfer or disclosure will be limited to circumstances permitted by applicable law and Google's applicable policies, such as user consent, security, or legal compliance.
Our handling of Google user data is intended to comply with the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to train general-purpose artificial intelligence or machine-learning models.
You can review or revoke third-party access through your Google Account security settings. Revoking access may not automatically delete information already stored in your Paperflow account; contact us to request deletion of Paperflow-held information.
We use Google user data only for the user-facing sign-in and account functions disclosed in the application, such as authenticating you, creating or linking your Paperflow account, and displaying relevant account details. We do not sell Google user data, use it for targeted advertising, or use it for purposes unrelated to the disclosed functionality.
We may process or store the minimum Google-provided information needed to operate account features. Infrastructure or service providers may process data on our behalf where necessary to operate or secure the service. We do not share Google user data with advertising platforms or data brokers. Any other transfer or disclosure will be limited to circumstances permitted by applicable law and Google's applicable policies, such as user consent, security, or legal compliance.
Our handling of Google user data is intended to comply with the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to train general-purpose artificial intelligence or machine-learning models.
You can review or revoke third-party access through your Google Account security settings. Revoking access may not automatically delete information already stored in your Paperflow account; contact us to request deletion of Paperflow-held information.
6. Legal Basis and Data Minimisation
We seek to collect and use only information that is relevant and reasonably necessary for the stated purposes. Depending on the circumstances and applicable law, processing may be based on your consent, the need to provide a feature you request, legitimate operational and security needs, or a legal obligation.
Where consent is required, we will seek it in an appropriate manner. You may withdraw consent where the law provides that right, although this will not make earlier lawful processing unlawful and may affect features that depend on the information.
Where consent is required, we will seek it in an appropriate manner. You may withdraw consent where the law provides that right, although this will not make earlier lawful processing unlawful and may affect features that depend on the information.
7. Cookies and Sessions
Paperflow may use essential cookies or similar technologies to maintain sign-in sessions, support security, and make website features work. The cookies used depend on the actual application configuration and third-party services enabled.
You can manage cookies through your browser settings. Blocking essential cookies may prevent sign-in or other features from working correctly. If non-essential analytics or advertising cookies are introduced, this policy and any consent controls required by law will be updated accordingly.
You can manage cookies through your browser settings. Blocking essential cookies may prevent sign-in or other features from working correctly. If non-essential analytics or advertising cookies are introduced, this policy and any consent controls required by law will be updated accordingly.
8. How We Share Information
We do not sell personal information as a business practice. We may disclose limited information:
- to hosting, security, maintenance, email, or other service providers where needed to operate Paperflow on our behalf;
- when you request a feature that requires a service provider;
- where reasonably necessary to protect users, investigate fraud or security incidents, or enforce our Terms; or
- where disclosure is required by law, a court, or a valid request from a competent authority.
We seek to limit sharing to what is necessary for the relevant purpose. Service providers should process information only as needed to provide their services and subject to applicable protections. Google user data is additionally subject to the restrictions in Section 5.
- to hosting, security, maintenance, email, or other service providers where needed to operate Paperflow on our behalf;
- when you request a feature that requires a service provider;
- where reasonably necessary to protect users, investigate fraud or security incidents, or enforce our Terms; or
- where disclosure is required by law, a court, or a valid request from a competent authority.
We seek to limit sharing to what is necessary for the relevant purpose. Service providers should process information only as needed to provide their services and subject to applicable protections. Google user data is additionally subject to the restrictions in Section 5.
- Hosting, security, maintenance, email, and other service providers needed to operate Paperflow.
- Service providers needed to deliver a feature you have requested.
- Disclosure reasonably necessary for security, fraud prevention, or enforcement of the Terms.
- Disclosure required by law, a court, or a competent authority.
- Google user data is subject to the additional restrictions explained in Section 5 of the Privacy Policy.
9. Data Retention and Deletion
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including account operation, support, security, dispute resolution, and compliance with legal obligations.
Retention periods depend on the type of information, how it is used, and legal or security needs. When information is no longer needed, we will take reasonable steps to delete it or de-identify it, subject to lawful retention requirements, security needs, and the normal operation of backups.
You may request deletion of personal information held by Paperflow by emailing everused69@gmail.com with the subject “Privacy and Data Deletion Request”. Include the email address associated with your account or other information sufficient to locate it, but do not send your password or one-time verification codes. We may take reasonable steps to verify the request. We will explain if some information must be retained for a lawful reason.
Deleting Paperflow-held information does not automatically delete information held by Google or another independent provider. You may need to manage data with those providers separately.
Retention periods depend on the type of information, how it is used, and legal or security needs. When information is no longer needed, we will take reasonable steps to delete it or de-identify it, subject to lawful retention requirements, security needs, and the normal operation of backups.
You may request deletion of personal information held by Paperflow by emailing everused69@gmail.com with the subject “Privacy and Data Deletion Request”. Include the email address associated with your account or other information sufficient to locate it, but do not send your password or one-time verification codes. We may take reasonable steps to verify the request. We will explain if some information must be retained for a lawful reason.
Deleting Paperflow-held information does not automatically delete information held by Google or another independent provider. You may need to manage data with those providers separately.
- Request access to personal information held by Paperflow, subject to applicable law.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information, subject to lawful retention requirements.
- Email everused69@gmail.com with the subject “Privacy and Data Deletion Request”.
- Do not send your password or one-time verification codes.
10. Security
We aim to use reasonable technical and organisational measures appropriate to the nature of the information and risks, which may include access controls, authentication, software updates, secure hosting configuration, and monitoring for suspicious activity.
No website, transmission, or storage system can be guaranteed completely secure. You should protect your devices and account credentials and contact us promptly if you believe your account has been accessed without permission. We will address suspected personal-data incidents in accordance with applicable legal requirements.
No website, transmission, or storage system can be guaranteed completely secure. You should protect your devices and account credentials and contact us promptly if you believe your account has been accessed without permission. We will address suspected personal-data incidents in accordance with applicable legal requirements.
11. International Processing
Depending on the hosting provider and services used, personal information may be processed or stored outside Zambia. Where international processing occurs, we will take steps required by applicable law and apply appropriate protections to the information.
12. Children and Students
Paperflow may be useful to students of different ages. We do not intend to collect personal information from children in a way that violates applicable law. Where the law requires consent from a parent, guardian, or other authorised person for a child's personal data, that consent must be obtained before the relevant processing takes place.
If you believe a child has provided personal information inappropriately, contact us at everused69@gmail.com so we can review the matter and take appropriate action.
If you believe a child has provided personal information inappropriately, contact us at everused69@gmail.com so we can review the matter and take appropriate action.
13. Your Privacy Rights
Subject to applicable law and any lawful limitations, you may have the right to:
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request erasure or deletion of personal information;
- withdraw consent where processing is based on consent;
- object to or request restriction of certain processing where the law provides that right; and
- raise a concern or complaint with the relevant data-protection authority.
To exercise a right, email everused69@gmail.com with the subject “Privacy Request”. We may need to verify your identity in a proportionate way before acting. We will consider requests in accordance with the laws that apply.
- request access to personal information we hold about you;
- request correction of inaccurate or incomplete information;
- request erasure or deletion of personal information;
- withdraw consent where processing is based on consent;
- object to or request restriction of certain processing where the law provides that right; and
- raise a concern or complaint with the relevant data-protection authority.
To exercise a right, email everused69@gmail.com with the subject “Privacy Request”. We may need to verify your identity in a proportionate way before acting. We will consider requests in accordance with the laws that apply.
- Request access to personal information held about you.
- Request correction of inaccurate or incomplete information.
- Request erasure or deletion, subject to applicable law.
- Withdraw consent where processing is based on consent.
- Raise a privacy concern or complaint with the relevant authority.
- Contact everused69@gmail.com with the subject “Privacy Request”.
14. Third-Party Links and Educational Materials
Paperflow may link to external educational institutions, examination boards, file hosts, or other websites. We do not control their privacy practices, security, or availability. Please review the privacy notices of those services before providing information to them.
Past examination papers and related materials may belong to third-party rights holders. This Privacy Policy concerns personal information handled by Paperflow; it does not transfer ownership of educational materials or change the rights of their owners.
Past examination papers and related materials may belong to third-party rights holders. This Privacy Policy concerns personal information handled by Paperflow; it does not transfer ownership of educational materials or change the rights of their owners.
15. Changes to This Privacy Policy
We may update this policy when Paperflow's features, data practices, service providers, or legal obligations change. We will publish the revised policy on this page and update the effective date. If a material change requires notice or consent under applicable law or Google policy, we will provide that notice or obtain consent before applying the change where required.
16. Contact Paperflow
For privacy questions, account-related requests, data access or correction requests, deletion requests, or concerns about this policy, contact:
Platform: Paperflow
Country: Zambia
Website: https://paperflow.kumoyotech.com
Email: everused69@gmail.com
Before production, replace these details if Paperflow uses a different public domain or dedicated support address.
Platform: Paperflow
Country: Zambia
Website: https://paperflow.kumoyotech.com
Email: everused69@gmail.com
Before production, replace these details if Paperflow uses a different public domain or dedicated support address.
Back
If you have questions about this document, please contact support.