Trust
Terms
These Terms govern your use of PastePile, a service owned and operated by PastePile Labs LLC, which is the contracting party. This page summarizes Terms of Service version 2026-09-23; the full text is presented for acceptance when you create an account.
On this page
The service
PastePile is an incident evidence workbench. It processes uploaded files and pasted text, organizes findings and investigation records, and produces reports and exports. Optional AI prioritization and enrichment require configuration and a separate action. See How it works and Pricing for supported inputs, capabilities and limits.
Your account and organization
Keep your account credentials private and grant access only to people authorized to work with your organization's evidence. Owners manage membership, billing and provider keys. Owners can access all organization cases. Other members need an explicit read or edit grant for the case's client, including the “no client” scope. Synthetic demo cases remain readable by all members. Contact support if you believe your account has been accessed without permission.
What you may upload
You must be authorized to share whatever you submit. Do not upload classified information, Controlled Unclassified Information (CUI), export-controlled information, or data you are not permitted to submit for processing by PastePile.
You are responsible for choosing evidence you may submit, reviewing sensitive information and retaining any independent originals your investigation requires. The browser's privacy check can miss secrets and does not establish permission to upload or disclose data.
Ownership and processing your data
PastePile Labs LLC owns and operates PastePile. Your submitted data remains yours or its existing rights holder's; uploading it does not transfer ownership.
By submitting data, you authorize PastePile's operator to store, copy and process it as needed to provide the PastePile functions you use, including analysis, collaboration, exports, security, retention and backup operations. You must have the authority to give that permission. Processing and deletion boundaries are described in Privacy. Separately requested external processing is described below.
Subscriptions and trials
Creating an account does not start a paid subscription. An organization owner selects a plan and monthly or annual billing through Stripe-hosted checkout. Review the price, billing interval and any trial shown there before completing checkout. Current plan and trial limits, including original-file retention, are disclosed on Pricing.
Checkout requires a payment method, including for an eligible trial. Trial eligibility is once per organization; a returning organization may be charged immediately. Unless canceled before the trial ends, the subscription moves to paid billing for the selected plan. Paid subscriptions renew automatically at the selected billing interval unless canceled.
Cancellation and access after a subscription ends
Organization owners can open Stripe's billing portal from Settings to cancel at any time. Cancellation takes effect at the end of the current paid period, and the subscription remains available until then. Fees already paid are non-refundable: there are no refunds or credits for partial periods, unused time or downgrades, except where the law requires otherwise. Cancellation does not by itself delete your cases or erase outstanding invoices or payment retries.
After a subscription ends, retained-state access permits reading and exporting records that have not expired or been deleted; new investigations, uploads and other paid work are blocked. Ordinary retention continues. Resubscribing can restore access to paid work, but cannot recover expired or deleted data.
Retention and organization closure
Original files and case records have different retention windows. An ephemeral case requests removal of originals after processing. Export or keep independent copies before applicable expiry or organization closure. Closing a case alone does not delete it.
Organization closure is separate from subscription cancellation. It cancels an existing subscription where applicable and removes the organization's accounts and investigation data through the closure workflow. A deletion failure is reported as incomplete and may require retry; some files may already have been removed. Limited platform records and provider records can remain, and backup copies are not immediately erased. See Privacy for those boundaries.
Third-party services
Hosting, storage, email and billing providers help deliver PastePile. The subprocessor list describes their involvement and known location limits. Optional AI and enrichment require available provider configuration and may require your organization's own provider key and separate provider fees. Review the payload or indicator preview before choosing to send it. Provider availability and the provider's own data-use terms are separate from PastePile's configuration.
What PastePile is not
PastePile produces findings from the evidence you supply. It is not a determination that a system is or is not compromised, and it is not a substitute for professional incident response. Findings state what the evidence supports and name what it does not establish; acting on them remains your decision.
Availability
PastePile is under active development and is provided as-is while it matures.
No uptime commitment is offered during development. Features may change and data may be migrated as the product evolves.
Liability
Neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill. Each party's total liability is limited to the fees paid to PastePile in the 12 months before the claim arose, except for payment obligations, indemnity obligations and liability that cannot be limited by law.
Governing law and notices
These Terms are governed by the laws of the State of Georgia, USA. The state and federal courts located in Fulton County, Georgia have exclusive jurisdiction over disputes.
Formal legal notices, such as notices of breach, termination or dispute, must be sent in writing to PastePile Labs LLC, 8735 Dunwoody Place Ste N, Atlanta, GA 30350, USA, with a copy by email to hello@pastepile.com. Support, privacy and security requests go to the email addresses below, not to that address.
Contact
Questions about PastePile or these Terms: hello@pastepile.com. Report vulnerabilities to security@pastepile.com.
Related information
- Security
How evidence is handled, stored and protected.
- Privacy
What is stored, for how long, and what leaves.
- Subprocessors
Every vendor, what it processes and where.
Last updated .