Privacy Policy

Last updated: May 14, 2026

Papye Lakay ("we", "us", "our") helps customers in Haiti and the Haitian diaspora request copies of Haitian government documents. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

1. Information we collect

When you submit a document request, we collect:

• Identity: first name, middle initial (optional), last name.
• Contact: email address, phone number.
• Shipping address: country, address lines, city, state/province, postal code.
• Order details: document type, processing speed, any additional information you provide in the free-text notes field.
• Technical metadata: IP address and browser user-agent (used for fraud prevention and rate limiting).

We never see or store your payment card details — those go directly to Stripe (see Section 3).

2. How we use your information

• To process and fulfill your document request.
• To email you order confirmations, status updates, and a secure download link when your document is ready.
• To contact you about issues with your order (e.g., if the government office needs additional information).
• To prevent fraud, abuse, and duplicate orders.
• To comply with legal obligations.

3. Third-party services we use

We use trusted third parties to operate the service. Each one only receives the information it needs to do its job:

• Stripe (payment processing) — receives your name, email, billing address, and payment details directly from your browser. We never see your card number. See Stripe's Privacy Policy.
• SendGrid (Twilio) — sends you transactional emails (confirmations, status updates, document-ready notifications). Receives your name, email, and order ID. Twilio's Privacy Policy.
• Amazon Web Services (S3) — stores fulfilled document files. Files are accessible only via short-lived (24-hour) signed download URLs sent to you by email.
• Railway (application hosting and PostgreSQL database) — hosts our backend and stores your order record. Data lives in US East.
• Netlify — hosts the website you are currently using.

4. How long we keep your data

• Document files: stored on S3 and delivered via 24-hour signed download links. Files older than 90 days are eligible for deletion.
• Order records: retained for at least 7 years for tax and payment record purposes, then anonymized or deleted.
• Email logs: retained by SendGrid per their default retention (typically 7–30 days).

5. How we protect your data

• All connections to and from papyelakay.com and our API are encrypted in transit using HTTPS / TLS.
• Payment processing happens entirely inside Stripe Checkout — we never receive card numbers.
• Document download URLs are short-lived (24 hours) and signed; they cannot be reused after expiry.
• Database access is restricted to the Papye Lakay team via authenticated administrative tools.

6. Your rights

You have the right to:

• Access a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (subject to legal record-keeping requirements).
• Withdraw consent and ask us to stop emailing you (you can also unsubscribe via the link in any email).

To exercise any of these rights, email us at papyelakayhaiti@gmail.com.

7. International data transfers

Our service providers (Stripe, SendGrid, AWS, Railway, Netlify) operate primarily from the United States. By using Papye Lakay, you understand that your information may be processed in the United States and other countries where these providers operate.

8. Children

Papye Lakay is intended for adults. We do not knowingly collect information from children under 13. If you believe we have collected information from a child, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email.

10. Contact

Questions about this policy? Email papyelakayhaiti@gmail.com or reach us on WhatsApp at +509 48 90 6779.

Papye Lakay is operated by Papye Lakay LLC, based in State of Florida, USA.