Legal

Privacy Policy

Effective October 3, 2026. Controller: PayAuthors, P.O. Box 252, Coppell, TX 75019, support@payauthors.com.

What we collect

• Searches. The names and ISBNs you type into the free check, and the ORCID iD, name or DOIs you enter in the free journal-article check, are sent to our server to run the search. For the article check our server asks Crossref, a public scholarly-metadata service, for the matching article list; Crossref receives the iD or name but nothing that identifies you. We log each check: the text you typed, the match setting, the time, the number of records found, the country your connection comes from (as reported by Cloudflare), and a visitor code. The visitor code is a keyed one-way hash of your IP address and browser that changes every day; we store the code, never the IP address, and it cannot be turned back into an IP address or used to link your checks across days. We use this log to count how many people use the free check and which searches find records. On the Find an attorney page we log, in the same way (time, country and the daily visitor code, no IP address), that the page was viewed and which of the advertiser's buttons or form you clicked, so we can tell an advertiser how many people saw and used their listing; we never see what you type into an advertiser's form. Free-check results are also cached for up to an hour by name so repeated checks are fast.
• Orders. When you buy a report we store an order record: the name searched, the match setting, the time, the Stripe session and payment identifiers, the amount, the e-mail address you give Stripe, and the frozen result set of the report. Stripe collects your card details and billing information under its own privacy policy; we never see the card number.
• Report access. We log when a report page or file is opened (report ID, time, file type) so that we can help if a link is lost and detect abuse.
• News e-mail updates. If you sign up for e-mail updates on the News page, we store your e-mail address, the frequency and filters you chose (search words, kind, company or site), when you signed up, confirmed, changed or left, when we last e-mailed you, the country your connection comes from and the daily visitor code described above (used only to limit abuse of the sign-up form). If you sign up yourself, updates start at once and we send a welcome e-mail with links to change or stop them. If you enter someone else’s address to invite them, we send them one e-mail asking them to accept and nothing else unless they do; we do not tell them who invited them or keep a record of who did. Every update has a link to change your settings and a one-click unsubscribe. We do not track whether you open the e-mails or click their links.
• Requests. If you use the press or licensing request form, we store what you enter (name, e-mail address, organization, role, topic, deadline and message), the time, your country and the daily visitor code, and e-mail ourselves a copy so we can reply.
• Server logs. Our host, Cloudflare, records standard request data (IP address, user agent, time, URL) for security and operations, retained briefly under Cloudflare's policies. Cloudflare Web Analytics, a page-view counter that uses no cookies and no fingerprinting, records which pages are viewed, the referring site, the browser type and the country.

What we do not collect

No advertising trackers, no analytics cookies and no accounts. The site sets no cookies of its own, except one that remembers the password on pages still in preview, for visitors who were given it. If you switch between light and dark mode, your browser remembers that choice on your device (local storage, key “pa-theme”); it is never sent to us. Fonts are served from our own site; no outside font or tracking service is loaded.

Why and on what basis

We process this data to run the search you asked for, to deliver and support the report you bought (performance of a contract), to keep records we are required to keep for tax and accounting (legal obligation), and to send the news e-mails you asked for and confirmed (consent, which you can withdraw at any time by unsubscribing), and to prevent fraud and abuse (legitimate interests).

How long

Order records, including the frozen report, are kept for seven years to meet accounting obligations and so that we can reissue a report you bought. Access logs and free-check search logs are kept for 12 months and then deleted. Free-check caches expire within an hour. News e-mail sign-ups are kept while you are subscribed; an invitation that is never accepted is deleted after 90 days, and one you unsubscribe from is deleted 30 days after you leave. Our log of which update e-mails were sent is kept for 12 months. Requests are kept for 24 months unless they lead to an order or agreement.

Sharing

Stripe (payments), Cloudflare (hosting and storage) and Proton (our mailbox) and Resend (which delivers the e-mails we send) process data on our behalf. We do not sell or share your data with anyone else, and we disclose it only if the law requires.

Research products are built from public records only. The reports, defendant lists and other research we sell are compiled from published library catalogs and U.S. Copyright Office records. They never include visitors’ searches, purchasers’ identities, report contents bought by others, inquiries or e-mail subscriptions; that data is used only to run the service as described here.

Your rights

You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it (we will keep what accounting law requires). Write to support@payauthors.com. If you are in the EU/UK you also have the right to complain to your data protection authority; if you are in California, Texas or another U.S. state with a privacy law, you have the rights that law gives you, and we will answer within the time it sets (45 days under most of these laws). If we turn down a request, you can appeal by replying with “Appeal” in the subject line; we will answer the appeal within 60 days, and if you disagree you can contact your state attorney general. We will not treat you differently for using these rights.

Global Privacy Control and “do not sell or share”

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and we do not knowingly collect data from children under 13. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of any sale or sharing, without asking you to do anything else. Our GPC support is also published at /.well-known/gpc.json.

Accessibility

We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA. The site uses a typeface designed for low-vision readers, works at 320 pixels wide and at 200% zoom, and is tested with automated accessibility checks. If anything is hard to use, or you need a report in another format, write to support@payauthors.com and we will help.

The data in the reports

The reports themselves consist of published bibliographic and public registration metadata about books: titles, author names as recorded by third parties, publishers, ISBNs, file names and U.S. Copyright Office registration data (which is a public record). If you are an author and believe a record about you is wrong, we can annotate it but cannot change the underlying public sources.