Privacy Policy

This Privacy Policy explains how PAGEBLOC ("PAGEBLOC", "we", "us") collects, uses, shares, and protects personal data when you use our website builder, our marketing site, and related services (together, the "Service"). It applies to visitors, account holders, and visitors to websites published with PAGEBLOC. By using the Service you agree to the practices described here.

1. Who is responsible for your data

PAGEBLOC is the data controller for personal data we process to provide the Service to you. Where you publish a website with PAGEBLOC and collect data from your own visitors (for example, through a contact form), you are the controller of that visitor data and PAGEBLOC acts as your data processor. You are responsible for having a lawful basis and your own privacy notice for data you collect from your visitors.

2. Data we collect

Information you provide

• Account data: name, email address, and password (stored as a secure hash) when you sign up.
• Site content: the text, images, pages, and settings you create in the editor.
• Billing data: your plan, subscription status, and billing email. Card details are collected and stored by Stripe, not by us.
• Support communications: messages you send us and our replies.
• Form submissions: data submitted to forms on websites you publish, which we store and forward to you.

Information collected automatically

• Usage data: pages viewed, features used, and actions taken in the Service.
• Device and log data: IP address, browser type, operating system, and timestamps.
• Cookies and similar technologies: see the Cookies section below.
• Analytics for published sites: aggregate, privacy-respecting visit and click metrics we provide to site owners.

3. How we use your data

We process personal data to:

• Create and manage your account and authenticate you.
• Provide, maintain, and improve the Service, including the editor, hosting, and publishing.
• Process payments and manage subscriptions through Stripe.
• Generate copy and suggestions when you use AI features (see AI Processing below).
• Send transactional emails (receipts, security alerts, form notifications) and, where permitted, product updates you can opt out of.
• Provide customer support and respond to your requests.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our Terms of Service.

4. Legal bases (GDPR/UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract: to provide the Service you sign up for and process your payments.
• Legitimate interests: to secure, improve, and market our Service, balanced against your rights.
• Consent: for non-essential cookies and optional marketing communications, which you can withdraw at any time.
• Legal obligation: to meet tax, accounting, and other statutory requirements.

5. AI processing

When you use PAGEBLOC's AI copywriting features, the prompt and relevant content you submit are sent to our AI provider to generate suggestions, which are returned to you. We do not use your private site content to train third-party foundation models, and we instruct our AI provider not to retain your inputs for training. You remain responsible for reviewing and editing AI-generated content before publishing it.

6. Cookies and similar technologies

We use a small number of cookies and similar technologies:

• Strictly necessary: to keep you logged in, secure the Service, and remember essential preferences. These cannot be switched off.
• Analytics: to understand how the Service is used so we can improve it. We use privacy-respecting analytics and aggregate data where possible.

You can control cookies through your browser settings, and where required we ask for your consent before setting non-essential cookies. Disabling strictly necessary cookies may break parts of the Service.

7. How we share your data

We do not sell your personal data. We share it only with:

• Service providers (sub-processors) who help us run the Service, bound by contracts that protect your data, including:
  • Supabase — database, authentication, and storage.
  • Stripe — payment processing and subscription management.
  • Our AI provider — to power AI copywriting features.
  • Email and hosting infrastructure providers — to deliver emails and serve your sites.
• Legal and safety recipients when required by law, to enforce our terms, or to protect rights, safety, and property.
• A successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

8. International transfers

Our providers may process data in countries other than your own, including the United States. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism.

9. Data retention

We keep account and site data for as long as your account is active. If you close your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records (for example, invoices) to meet legal obligations. Form submissions are retained until you delete them or close your account.

10. Security

We use encryption in transit (HTTPS/TLS), encryption at rest where appropriate, hashed passwords, access controls, and reputable infrastructure providers to protect your data. No method of transmission or storage is perfectly secure, but we work hard to protect your information and to respond promptly to any incident.

11. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@pagebloc.com. We will respond within the time required by applicable law.

12. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you by email or in the Service. Continued use after an update means you accept the revised Policy.

14. Contact us

Questions about this Policy or your data? Email privacy@pagebloc.com. For our terms, see the Terms of Service.