Passwords or keys
Never send account passwords, API keys or access tokens. If a task needs system access, we will arrange a safer route.
Data and file handling
Your material,
kept narrow.
Files you share are held in private storage, reachable only by the people attached to your project, and released on expiring links.
How your files are held.
01
Private by default
No client material sits in a public location. Source files, drafts, previews, final deliverables, payment evidence and agreements are kept in separate protected areas rather than one shared folder.
02
Authorised per request
Every download is checked on the server against your identity and your membership of the project. Access is not controlled by hiding a link or a button.
03
Expiring links
Where a file is served directly, it is served through a signed link with a short lifetime. Permanent file links are never sent by email.
04
Separated by project
Database rules prevent one client seeing another client's records, and prevent a provider seeing engagements they are not assigned to.
05
Recorded access
Sensitive actions — releasing a deliverable, verifying a payment, changing a payout destination — are written to an audit record with the person and the time.
06
Controlled release
Drafts are shown as watermarked, reduced-resolution previews. Editable originals are not exposed before the agreed release conditions are met.
Please do not upload
Some things should never reach us.
Payment card details
Card numbers, CVV codes and full banking credentials are never required. Payment instructions appear on your issued invoice.
Unrelated personal data
Share only what the work needs. If a dataset contains identifiable people who are not relevant to the analysis, remove or pseudonymise those fields first.
Material you cannot share
Data under an embargo, ethics restriction or confidentiality agreement that does not permit third-party processing. Tell us about the restriction instead.
Retention and removal.
Project material is kept while the engagement is active and afterwards only as long as records, disputes or legal obligations require. You may request access, correction or deletion, and P.A.U.L will comply except where an active contractual or legal duty prevents it.
Requests go to support@paulresearch.online. See also the privacy notice and terms.