This Privacy Policy outlines how Papers App Ltd ("Papers", "we", "us", "our") collects, processes, and protects your personal data.
Company: Papers App Ltd (C112488)
Address: Soho The Strand, Fawwara Building, Unit S099, Triq l-Imsida, Gzira, GZR 1401, Malta.
Email: hey@papers.mt
We collect personal data (including identification documents, contact details, and financial information) for the following purposes:
A. SERVICE DELIVERY: To facilitate company formation, accounting, and compliance services.
B. COMPLIANCE (KYC/AML): To perform mandatory identity verification and Anti-Money Laundering (AML) checks required by Maltese law.
C. MARKETING: To manage advertising campaigns via Google Ads and Facebook Ads (Meta Pixel) and send commercial updates with your consent.
D. ANALYTICS: To monitor website performance using Plausible Analytics, a privacy-first tool that does not track personal data or use invasive cookies.
To ensure the highest security standards and legal compliance, we use Didit (Didit.me) as our specialized technology provider for identity verification.
A. BIOMETRIC DATA: When using Didit, you may be required to provide a "liveness check" or facial scan to verify your identity against your ID document. This involves the processing of biometric data, for which we (or Didit) will request your explicit consent at the time of collection.
B. DATA MINIMIZATION: Didit processes your data securely to confirm your identity and prevent fraud, sharing the verification results and necessary documents with us and our regulated partners.
We process your data based on:
A. CONTRACTUAL NECESSITY: To perform the services requested.
B. LEGAL OBLIGATIONS: Compliance with AML/KYC regulations in Malta.
C. CONSENT: Specifically for the processing of biometric data during the Didit verification process and for marketing cookies.
D. LEGITIMATE INTEREST: To ensure the security of our platform and prevent identity theft.
Your data may be shared with:
A. REGULATED PARTNERS: Zerafa Trustees Ltd (C 97921), our licensed CSP partner responsible for regulated corporate services in Malta.
B. TECHNOLOGY PROVIDERS: Didit (Didit.me) for identity verification services.
C. PUBLIC AUTHORITIES: The Malta Business Registry (MBR) and the Malta Financial Services Authority (MFSA).
D. FINANCIAL INSTITUTIONS: Partners such as Revolut Ltd for account opening introductions.
Data may be shared between Papers App Ltd (Malta) and Papers Andorra SL (Andorra) to provide cross-border services. We ensure all transfers follow GDPR-compliant safeguards.
In compliance with Maltese AML laws, identification and transaction data are generally retained for a period of ten (10) years after the end of the business relationship.
You have the right to access, rectify, or erase your data, as well as the right to object to or restrict processing. You may also withdraw your consent for biometric processing at any time, though this may prevent us from completing your onboarding. To exercise these rights, contact hey@papers.mt.
All data transmitted through our platform and our KYC partner (Didit) is encrypted using industry-standard protocols to protect against unauthorized access or data breaches.
You have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta if you feel your data rights have been infringed.
Last updated: February 2026
