Privacy Policy

Pagge Inc. ("Pagge", "we", "us", or "our") operates the Pagge platform and website at pagge.co (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you consent to the collection and use of your information as described in this Privacy Policy.

1. Information We Collect

We collect information you provide directly to us and information we collect automatically when you use the Service.

• Account Information. When you create an account, we collect your name, email address, and a hashed password. If you sign in with a third-party provider (such as Google), we collect the information you authorize that provider to share with us.
• Payment Information. When you subscribe to a paid plan, payments are processed by our payment providers (currently Paddle and Lemon Squeezy), who act as the Merchant of Record. We do not collect or store your full payment card details. Our providers collect billing information such as your card details, billing address, and transaction history in accordance with their own privacy policies.
• Content You Publish. If you use Pagge to create a store, we store the content you upload, including product descriptions, images, branding, and customer order records.
• Usage Data. We automatically collect information about how you access and use the Service, including your IP address, browser type, device identifiers, pages visited, referring URLs, and other diagnostic data.
• Communications. If you contact us for support, we collect the contents of your messages and any information you choose to provide.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service, including account management, publishing your stores, and processing your orders.
• Process payments and manage subscriptions, including billing, renewals, and refunds through our payment providers.
• Communicate with you, including service notifications, account updates, and responses to support requests.
• Improve and personalize the Service, including analyzing usage patterns and diagnosing technical issues.
• Ensure security and prevent fraud, including detecting abuse, protecting against unauthorized access, and enforcing our Terms of Service.
• Comply with legal obligations and protect our rights and the rights of others.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance. To provide the Service you have requested, including account management, publishing, and payment processing.
• Legitimate interests. To operate, secure, and improve the Service, prevent fraud, and communicate with you about the Service.
• Legal obligation. To comply with applicable laws, regulations, and legal requests.
• Consent. Where we ask for your consent (for example, for marketing emails or optional cookies), you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Sharing of Information

We do not sell your personal information. We share information only in the following circumstances:

• Payment Providers. We share necessary billing and order information with our Merchant of Record payment providers, Paddle and Lemon Squeezy, to process subscriptions, handle taxes, and provide payment support.
• Service Providers. We share information with trusted third-party vendors who help us operate the Service (for example, cloud hosting, email delivery, and analytics providers), subject to appropriate data processing agreements.
• Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.
• Legal Requirements. We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety and those of our users.
• With Your Consent. We may share your information with third parties when you have given us your explicit consent to do so.

When we share data with third parties, we require them to process your personal data in accordance with this Privacy Policy and applicable data protection laws.

5. Cookies and Tracking Technologies

We use cookies and similar technologies (including browser local storage) to operate and improve the Service, remember your preferences (such as your color theme), and understand how the Service is used. You can control cookies through your browser settings. For more details, see our Cookie Policy.

6. Data Retention

We retain your personal information only for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

7. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside, including the United States and the United Kingdom. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, to protect your information when it is transferred internationally.

8. Your Privacy Rights

Depending on your location, you may have the following rights with respect to your personal information:

• Access. Request a copy of the personal information we hold about you.
• Rectification. Correct inaccurate or incomplete personal information.
• Erasure. Request deletion of your personal information in certain circumstances.
• Restriction and Objection. Restrict or object to certain processing of your personal information.
• Data Portability. Receive your personal information in a structured, machine-readable format.
• Withdraw Consent. Withdraw your consent at any time where processing is based on consent.

If you are located in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

9. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee its absolute security.

10. Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected personal information from a child, please contact us and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through the Service. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].