Privacy policy

metasearch.sh is operated by Paperfoot AI Pte. Ltd. (UEN 202450712K), 32 Pekin Street #05-001, Singapore 048762 ("Paperfoot", "we"). We act as the data controller for the personal data described here.

Account data. Your email address, used for sign-in links and service notices.

API usage. For each request: the query text, chosen provider and mode, response status, latency, cost, and the API key that made it. We keep this so you can audit your own usage and bills, and so we can meter accurately.

Payment data. Payments are processed by Stripe. We never see or store card numbers — only the payment reference and amount needed to credit your balance.

Search queries are forwarded to the upstream provider you select (or the default for your chosen mode): Brave, Serper, SerpAPI, Exa, Jina, Linkup, Firecrawl, Tavily, Browserless, Perplexity, Parallel, or xAI. Each processes your query under its own privacy terms. We send only the query and search parameters — never your identity, email, or key.

We don't sell personal data, run advertising, or use your queries to train models. API keys are stored encrypted; account passwords don't exist (sign-in is by one-time email link).

The service runs on Vercel (hosting, US East) and Supabase (database and authentication, US East). Both act as data processors on our behalf.

Account data is kept while your account exists. Usage records are kept for as long as needed for billing audit, then aggregated or deleted. Ledger entries are retained as accounting records for the period Singapore law requires (currently five years).

Under the PDPA you may request access to or correction of your personal data, or withdraw consent (which may end the service for you). Write to privacy@paperfoot.ai and we'll respond within 30 days.

If this policy changes materially we'll email account holders before the change takes effect. The current version always lives at metasearch.sh/privacy.