Pagewell Privacy Policy
[Operator] ("we") runs Pagewell (the "Service"). We never ask for your name or phone number and process only what the Service needs.
1. What we process
| Category | Data | When |
|---|---|---|
| Anonymous account | A random user ID, a system-generated placeholder email (not yours), sign-in token and expiry, browser or device info (User-Agent) | Created automatically on first use |
| Email (optional) | The email you enter to restore purchases or sign in on another device, whether it was verified, and service-email send and unsubscribe records | When you request a sign-in link |
| Public page | Page address (slug), name, bio, avatar emoji, theme, link titles and URLs — visible to anyone | When you publish |
| Click statistics | Clicks per link per day (no visitor IP, device data or identifiers are stored) | When a visitor taps a link |
| Invite record | If you publish your first page from an invite link (?ref=): the inviter's page address, the link between your account and the inviter's account, and the time. Used only so each invite is rewarded once. | When you publish your first page from an invite link |
| Reports | Reported page address, reason, reporter's user ID (if signed in), a daily network value | When you report a page |
| AI page draft input | Handle, bio, link URLs and titles; the server reads each linked page's public title | When you ask for a draft |
| Usage records | Time, count and cost of AI/upload use; app events (opens, screens, feature use, paywall views, errors); app version, platform, country (estimated from the IP, which is not stored); random install and session IDs | While you use the service |
| Abuse prevention | A daily value that represents your network (a keyed one-way transform of the IP, never the IP) and that day's counts of new accounts, free uses, reports and sign-in links | On sign-up, free use, reports and sign-in links |
| Purchases | Product ID, subscription status and expiry, Paddle subscription, customer and transaction IDs. Paddle, the Merchant of Record, handles your card directly; we never receive it. | From the payment provider when you buy, renew, cancel or get a refund |
2. Why
- To create and keep your anonymous account and restore purchases
- To provide building and hosting a public link-in-bio page, link click statistics and an AI page draft
- To enforce free, trial and paid limits and prevent abuse
- To improve the Service and fix errors (statistics)
- To send service emails to email accounts: a welcome, a reminder about 2 days before a free trial ends, and a come-back email 7 days after a subscription ends (promotional). Every email has an unsubscribe link that stops them at any time.
3. Data that stays on your device
Your working draft and settings are stored in your browser (localStorage). It is not sent to our server and is removed when you clear the app's or browser's data.
4. AI features
- Draft inputs and fetched page titles are used only to produce the draft and are not stored.
- AI inputs are sent to our processors (OpenRouter and model providers) with zero-retention and no-training settings.
- AI inputs are never put in event or error logs.
5. Retention
- Account, purchase status, usage records and this Service's server data: deleted immediately when you use "Delete my data". Sign-in sessions expire after one year without use.
- Public pages and click statistics: deleted immediately when you delete the page or your account.
- Invite records: deleted immediately when either the inviter or the invitee deletes their account. The bonus the inviter already earned (only the number of extra links) stays until the inviter's own account is deleted.
- Reports: kept up to 1 year after they are handled (for disputes).
- Service-email send and unsubscribe records: deleted with your account; trial-reminder and come-back send records are deleted automatically after at most 180 days.
- Abuse-prevention values: deleted automatically after at most 2 days.
- Usage events: kept up to 1 year.
- Transaction records the law requires us to keep are kept for the legal period.
- How data is destroyed: when the retention period ends or you ask for deletion, we delete it without delay from our database and file storage so it cannot be restored. We keep no paper records.
6. Processors and international transfers
We use the processors below. Their servers are outside Korea, so data is transferred abroad over encrypted connections (HTTPS) when you use the Service.
| Recipient (contact) | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. (contact: dpo@cloudflare.com) | USA and data centers worldwide | Account, purchase/subscription state, usage records, this app's server-side data, requests in transit | Servers, database, file storage | Until account deletion or end of contract |
| Cloudflare, Inc. (Email Service) (contact: dpo@cloudflare.com) | USA and others | Email address, sign-in link, service email content | Sending restore sign-in emails and service emails | Per Cloudflare's policy after sending |
| OpenRouter, Inc. and the AI model providers it routes to (e.g. DeepSeek model hosts) (contact: privacy@openrouter.ai) | USA and others | AI feature input | Generating AI results | Deleted after processing (zero-retention setting) |
| Paddle.com Market Limited and affiliates (our online reseller and Merchant of Record for every web order) (contact: privacy@paddle.com) | UK, USA and others | Email, country and postcode, payment details (your card or other payment method is collected and handled by Paddle directly), user ID, product | Web orders and payments, sales tax/VAT, subscription management, refunds and order support | Per law and Paddle's privacy policy |
| Tinybird, Inc. (contact: legal@tinybird.co) | USA (data stored in the operator account's region: USA or EU) | Usage events | Usage statistics and error analysis | Up to 1 year from collection |
Legal basis: Article 28-8(1)(iii) of Korea's Personal Information Protection Act (outsourcing and storage needed to perform our contract with you, disclosed in this policy). When and how: each time you use the Service, over encrypted connections (HTTPS).
7. Your rights
- You can ask to access, correct, delete or stop the processing of your data at any time.
- "Delete my data" in Settings deletes your account and server data immediately. Cancel a web subscription in "Manage subscription" first.
- For anything else, contact [Contact].
8. Children
The Service is not directed at children under 14 (under 13 in the US). They may use it only with a parent's consent.
9. Security
- HTTPS everywhere
- Sign-in tokens stay in your browser's storage for this site
- Least-privilege server access and separately stored secrets
- Daily limits and rate limits per feature
10. Cookies and tracking
We use your browser's storage (localStorage) to keep you signed in and, after an email sign-in, a sign-in cookie on our server's domain. We use no advertising or tracking cookies.
11. Contact
Privacy contact: [Operator] · [Contact]
12. Changes
We announce changes in the Service or on this page at least 7 days before they apply (30 days for important changes).