Privacy policy
Updated November 12, 2026. Revised contractual provisions apply to new contracts from this date. Existing contracts change only following the required notice and any consent required by law.
Who operates PageCaptain
Anemo Adrian Czarnoleski, ul. Zielonogórska 7/42, 41-218 Sosnowiec, Poland. NIP: PL6443545500. Contact us at contact@pagecaptain.dev.
Information we use
We process your account email, authentication information, business details, website content, uploaded files, AI instructions, saved versions, usage records and support messages. Our hosting and authentication providers also process technical information such as IP addresses, request times and error logs. Never include passwords, payment-card details or sensitive personal records in an AI request.
Why we use it
We use account and website information to provide the service you request, including signing you in, generating and editing websites, storing your work and publishing when instructed. This processing is necessary to perform our agreement with you. We use security and usage records for our legitimate interests in preventing abuse, protecting accounts, resolving faults and controlling service costs. We process information when required by law. If we introduce an optional use requiring consent, we will ask separately.
Service providers and AI
Vercel provides hosting; Supabase provides authentication, database and file storage; Anthropic processes the instructions and relevant website material needed for AI features; Stripe handles checkout, subscriptions and payment records; GitHub stores encrypted recovery archives; Resend delivers account emails; and Aftermarket provides our support mailbox. We share the information needed for their respective tasks. We do not sell personal information or use it for targeted advertising.
These providers may process information outside your country, including outside the European Economic Area. Applicable transfer requirements and safeguards, such as contractual safeguards, must apply to those transfers. Contact us for information about the arrangements relevant to your data.
Optional Google connections
If you connect Search Console, we request permission to verify your website address, add it to your Google account and submit its sitemap. If you connect Google Analytics, we request permission to list your Analytics accounts and properties and create or connect reports for your website. These permissions do not provide access to Gmail or Google Drive. We do not import search or visitor reports into PageCaptain or use Google account data for AI training or advertising.
During setup, Google access tokens are held in encrypted, secure browser cookies for no more than one hour. We do not retain refresh tokens. We store the website verification token and Analytics identifiers needed to maintain your chosen connection. Disconnecting in SEO & Analytics removes PageCaptain's verification or tracking tags; it does not delete your Google property or historical reports. You can also revoke PageCaptain's permissions in your Google account. Google Analytics on customer websites is loaded only after a visitor accepts analytics; visitors can change their choice through Cookie settings.
PageCaptain's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Your published website
Draft pages require your account access. Uploaded website images are served from public file URLs, so do not upload confidential material even for a draft. Publishing makes the selected website content available to the public, including any personal information you choose to put on it. Search engines and other visitors may keep copies after you remove a page. Enquiries submitted through a generated website are stored for its owner in the dashboard.
As a website owner, you decide why you collect visitor enquiries and what you publish. You are responsible for giving visitors an appropriate privacy notice and having a lawful basis for that information. We process your visitors' enquiries on your instructions under our data processing agreement, which forms part of the service terms. Do not collect health records, payment-card details or other sensitive records through these forms.
How long we keep information
Cancellation stops renewal; it does not delete the account. Website content is retained and deleted under the subscription-retention policy below, while necessary account and payment records are retained separately. Request closure, an export or deletion through support. We aim to remove customer content from active systems within 30 days after verifying a deletion request, unless a legal requirement requires retention. Our encrypted daily recovery archives expire after 15 days; deleted data may remain in those archives until expiry and deletion requests must be reapplied if a backup is restored. Provider logs and backups have their own retention schedules. Accounting records are retained for the applicable statutory period, and evidence needed for a specific dispute or security investigation may be retained for its duration. Signup admission records are removed after two days on subsequent signup activity.
If PageCaptain closes
If PageCaptain permanently closes, we will use account contact details to communicate closure, retrieval and refund arrangements. For a planned closure, customer content remains available for support-assisted retrieval until at least 30 days after hosting ends. We aim to delete active customer-content copies within 30 days after that retrieval period or completion of a timely pending return request, unless you request earlier deletion or law requires retention. Recovery copies then expire under the backup schedules described above. We retain only records still needed for legal, accounting, security or specific dispute purposes, with restricted access. Closure does not authorise sale or unrelated reuse of customer data and does not remove data-subject rights.
Website retention after non-payment
We send subscription reminders approximately 14 and 7 days before the paid period ends. When renewal is scheduled, Stripe attempts to charge your saved payment method automatically. If payment is not confirmed, AI access stops when the paid period ends, while existing public hosting continues for 30 days. We send an expiry notice and a final retention warning. Non-payment never triggers automatic deletion. After the grace period, an administrator reviews the account and must explicitly approve any website deletion. Website pages, drafts, blog content, enquiries and associated uploads may then be permanently deleted, but never before 30 days after the paid period ends, 30 days after our retention notice and 7 days after the final warning. Request a support-assisted export or renew before deletion. Failed notices, unresolved payments, legal holds or recovery work can delay deletion; they do not extend paid AI access. Registrar-owned domains, your login, unused purchased credits and required billing records are excluded from website cleanup. Recovery archives expire on their usual schedule. This retention policy applies to subscriptions purchased under these terms; existing subscriptions are not silently enrolled.
Your choices and rights
You can ask to access, correct, erase, restrict or receive a portable copy of your personal data, and object to processing based on legitimate interests. Where processing depends on consent, you may withdraw it. Rights depend on the applicable law and circumstances. Write to our support address; we may need to verify your identity. You can complain to the Polish supervisory authority, UODO, or your local data protection authority. Providing account details is necessary to open an account; optional business material is your choice. We do not use AI to make legal or similarly significant decisions about you.
Updates
We will update this notice when our practices change and communicate material changes through the service or email. PageCaptain is intended for adults managing websites for themselves or their businesses.