Privacy Policy

Your privacy is our priority. Learn how we collect, use, and protect your data with complete transparency.

Last updated: January 15, 2025

Privacy at a Glance

What We Collect

Only what's necessary: account info, captured content, and usage analytics.

How We Protect It

Enterprise-grade encryption, secure servers, and regular security audits.

Where It's Stored

Secure data centers in the US and EU, with GDPR compliance.

Who Can Access It

Only you and authorized PageStash staff for support purposes.

1. Information We Collect

Account Information

  • • Email address (for account creation and communication)
  • • Name (optional, for personalization)
  • • Password (encrypted and never stored in plain text)
  • • Subscription and billing information (processed by Stripe)

Captured Content

  • • Web page screenshots and HTML content you choose to save
  • • URLs and metadata of captured pages
  • • Your notes, tags, and folder organization
  • • Search queries within your captured content

Usage Analytics

  • • Feature usage patterns (to improve our service)
  • • Performance metrics (page load times, error rates)
  • • Device and browser information (for compatibility)
  • • IP address and general location (for security and compliance)

2. How We Use Your Information

Primary Purposes

  • • Provide and maintain the PageStash service
  • • Store and organize your captured web content
  • • Enable search and retrieval of your saved content
  • • Process payments and manage subscriptions
  • • Provide customer support and respond to inquiries

Secondary Purposes

  • • Improve our service through usage analytics
  • • Send important service updates and security notifications
  • • Detect and prevent fraud or abuse
  • • Comply with legal obligations and law enforcement requests

3. Data Security & Protection

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Your content is protected with enterprise-grade security.

Secure Storage

Data is stored in SOC 2 compliant data centers with 24/7 monitoring, regular backups, and disaster recovery.

Access Control

Strict access controls ensure only authorized personnel can access systems, with all access logged and monitored.

Compliance

We comply with GDPR, CCPA, and other privacy regulations, with regular audits and security assessments.

4. Your Rights & Choices

Under GDPR, you have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Rectification: Correct any inaccurate or incomplete data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Portability: Export your data in a machine-readable format
  • Restriction: Limit how we process your personal data
  • Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at support@pagestash.app. We'll respond within 30 days and may require identity verification.

5. Data Sharing & Third Parties

We DO NOT sell your data

PageStash will never sell, rent, or trade your personal information or captured content to third parties for marketing purposes.

Limited Sharing

We only share data with:

  • Service Providers: Stripe (payments), Supabase (hosting), Vercel (infrastructure)
  • Legal Requirements: When required by law, court order, or to protect our rights
  • Business Transfer: In case of merger or acquisition (with notice to users)

6. Data Retention

Retention Periods

  • Active Accounts: Data retained while your account is active
  • Deleted Accounts: Data permanently deleted within 30 days
  • Billing Records: Kept for 7 years for tax and legal compliance
  • Analytics Data: Anonymized and retained for up to 2 years

7. Contact & Updates

Questions or Concerns?

If you have any questions about this Privacy Policy or our data practices, please contact us:

📧 Email: support@pagestash.app

🌐 Web: pagestash.com/contact

📍 Address: PageStash Inc., 123 Privacy Lane, San Francisco, CA 94105

Policy Updates: We may update this Privacy Policy occasionally. Material changes will be communicated via email and posted on our website 30 days before taking effect.