Paper Route
Start free

Privacy Policy

Last updated: October 25, 2026.

Your brand, listing facts, content strategy and feedback are used to write and render your weekly reels. Your headshot is personal in a way that deserves its own paragraph — see “Your headshot” below. We don’t sell your data, we don’t run advertising trackers, and we don’t train our own models on your content.

1. Who is responsible for your data

Paper Route is a service of Clearpoint Systems, operated by Tom Shlager. For anything privacy-related, contact support@trypaperroute.com.

2. What we collect

Things you provide:

  • your brand profile: name, brokerage, headshot photo(s), logo, brand colors, contact info, and (optional) your Instagram handle;
  • your content strategy, package edits, feedback, and recent-content history;
  • your mobile phone number and your consent, if you add one, so we can text you your reels and ask for changes;
  • listing details and listing photos you add, including the facts used in a listing package;
  • market facts, source links, and the optional housing/economic news used for research;
  • your sign-in profile (email, display name, avatar) from email sign-up or Google, via Supabase Auth.

3. Your headshot

Your headshot and logo are composited into your reels as-is (an intro card, a corner badge, a CTA card) — that step is plain image compositing with no model involved. Background removal on the headshot runs as described in section 4. There is no camera capture, no real-time or interactive avatar, no identity verification and no biometric matching. Your headshot is never used in another agent’s content, sold, or used in our own marketing without your permission.

4. How your reels are made, and who processes what

Each step below runs at a named provider, which acts as a processor for that step only:

  • Writing, review and compliance checks— Google’s Gemini model, routed through OpenRouter to Google Vertex AI. Research into current housing/economic news uses Google Search grounding and is called directly against Google; private listing addresses and your contact details are never sent to Search or to any media provider.
  • Generated images— OpenAI’s image model for cover art, text cards, charts and backdrops, and Google’s Gemini image models via OpenRouter. These are generated with no photo of you at all, and never carry your logo.
  • Headshot preparation— background removal runs on our own servers. If the result fails its quality check, the photo may be sent to OpenAI’s image-editing endpoint instead, and a low-resolution cut-out may be enlarged by Topaz via Pika API Club.
  • Music— pre-generated, licensed audio beds shipped with the product. Nothing is generated or fetched per reel.
  • Accounts, database, file storage, hosting and email— Supabase, Railway, Vercel and Resend.

Planning your weekly ideas. Each week we read the public posts on the Instagram account you give us, to plan your ideas for the coming reels. We read only what anyone can see, in a web browser, and we use none of your login or account access for it. We use public housing-market pages (Redfin) for the numbers about the areas you serve. We never post, like, comment or message from your account as part of this. We keep a short summary of what we read — post links, dates, formats and short caption excerpts — with the ideas it produced, until you delete your account. Anthropic’s Claude models process the text we read, to propose the ideas.

5. Your conversations with your content employee

If you chat with your content employee, each message you send — along with the listing and content-package summaries and market figures needed to answer it — is processed to generate a reply. Images you send in chat are stored privately in your account and sent, with your message, to the language model provider below so it can answer. Three providers act as processors for that purpose only:

  • Generating replies— OpenCode Go, which routes your message to the underlying language model. OpenCode Go’s published terms say most models are not used to train the provider’s own models; a small set of models it explicitly labels “contributor” models trade discounted pricing for permission to train on prompts and completions.
  • Running the conversation— Trigger.dev, which executes each turn and keeps its own run logs (your messages and the assistant’s tool activity) for a period set by its retention policy (up to 30 days on our plan). On our side, the stored transcript of a run is cleared automatically 30 days after the run.
  • Remembering what you told it— Mem0, which stores your own chat messages when they are worth remembering (a stated preference or request, not a bare “ok” or “thanks”) and returns the relevant ones before your next turn, so the assistant doesn’t ask again. Mem0 is keyed to your own account and sees only that chat text — never the assistant’s replies, your listings, market data, or content packages.

Deleting your account deletes your chat messages and the images you sent in them, any standing instructions you gave the assistant, and your Mem0-stored memories, along with everything else.

5. Instagram publishing

If you connect your Instagram account, we use Instagram Login and ask for two permissions: instagram_business_basic and instagram_business_content_publish. Through it we receive your Instagram user id, username, account type, and profile picture — nothing else.

We store:

  • your access token, encrypted;
  • a record of each post: its caption, its schedule, its status, and — once posted — the Instagram media id and permalink.

We publish only content you asked us to post or schedule, by text or in the app. We never read your Instagram messages or followers, and we never post anything you haven’t approved.

Your access token is deleted the moment you disconnect, if you remove Paper Route’s access from within Instagram, or when you delete your Paper Route account. You can disconnect any time from Settings → Connections, or from Instagram itself: Instagram → Settings → Apps and websites.

To request deletion of your Instagram data specifically, see Delete your Instagram data.

5. Analytics and error tracking

We use PostHog for product analytics in one of two modes. If you accept measurement, we count page visits and product usage with first-party cookies, record anonymous session replays that mask everything you type (images and video render as visitors see them), and connect usage to your account after sign-in. If you decline — or visit from a region where we must ask first and haven’t answered yet — we only count that a page was visited: no cookies, no replays, no identity, nothing stored on your device. With Global Privacy Control switched on we collect nothing at all. We use Sentry for error monitoring; request bodies are not attached to error reports. Raw scripts, private listing details, and your feedback notes are never sent to either. Use the “Cookie choices” control below to change your answer at any time.

5. How long we keep things

  • Approved content packages, source links, claim mappings, and their rendered video are retained for quality, compliance, and recovery.
  • If your free week ends without becoming a paid plan, your uploaded photos are deleted 30 days after the free week ends.
  • Audio and word-timing files from a render are purged 30 days after the run.
  • Rejected candidates are available only to operators for debugging.
  • An assistant run’s stored transcript is cleared automatically 30 days after the run; your chat messages (with the images in them), instructions, and Mem0-stored memories are deleted when your account is deleted.

5. Deleting your data

“Delete my account” removes your profile and account entirely and purges your uploaded files — headshot, logo and rendered media. We keep two kinds of internal records after account deletion, stripped of your identity: usage/cost accounting entries and product event logs (e.g. “a content package was generated”), which no longer reference you personally.

5. Changes

We may update this policy as the product evolves; the date above always reflects the current version, and material changes will be communicated on the site.

5. Contact

Privacy questions or requests: support@trypaperroute.com. See Contact for other ways to reach us.