Short version: we keep the minimum needed to run the Service. The only analytics tool is Google Analytics on the marketing site (home, Explore, Docs, these legal pages); reader pages and the console carry no trackers and set no cookies of ours, card numbers never reach our servers, and we do not sell personal information or use your content to train models.
PageWell ("we", "us", "our") respects your privacy. This Privacy Policy ("Policy") explains what personal information we collect when you use PageWell (the "Service"), why we collect it, how long we keep it, who we share it with, and the rights you have. Please read it before using the Service. Using the Service means you have read and understood this Policy. Material changes are announced by email at least 14 days in advance.
1. Data controller
The data controller for the Service is:
- Controller: the individual who operates PageWell as a sole trader (the "Operator"). Legal name and jurisdiction are provided on request.
- Privacy contact: support@pagewell.ai
- Data Protection Officer: not appointed (not required at our scale of processing)
This Policy is referenced by our Terms of Service, Section 11.
2. Personal information we collect
2.1 Information you give us
- Account: when you sign in with Google we receive your email address, display name and profile picture from Google. We do not receive or store your Google password. When you sign in with your email address instead, we store that address and send a one-time 6-digit code to it; the code is kept only as a hash and expires after 10 minutes. There are no passwords. Sign-ins by Google and by email that prove the same address belong to the same account. You may later set a public handle and profile text.
- Content you upload: the documents, assets and templates you push, and the settings you give each share (visibility, expiry, share code, password). Share passwords are stored only as salted hashes. A guest upload does not require account information and receives a sharing link that expires after 24 hours.
- Billing: your plan, subscription status, billing period and the customer and subscription identifiers assigned by Waffo Pancake. We never receive or store full card numbers — card data is entered on and processed by Waffo Pancake (see Section 5).
- Communications: emails you send to support, and content reports you submit (a report may be filed anonymously).
2.2 Information collected automatically
- Sessions and tokens: for each browser session and each agent token — creation time, last-use time, and the IP address it was last used from, so you can recognise and revoke them in the console.
- Guest-upload abuse limit: to enforce the limit of five anonymous uploads per IP address each UTC day, we turn the source IP into a keyed, one-way HMAC and store only that value with the day and count. Our application database does not store the raw IP for this limit, and the value is not joined to an account.
- Audit log: an append-only record of actions on your account (creating a share, deleting a document, issuing a token, and similar) with the action, its target, a timestamp and the country derived from the request IP. The audit log does not store full IP addresses.
- Request logs: our hosting provider, Cloudflare, records request metadata (IP address, user agent, timestamp, path, response code) for security, abuse prevention and debugging. These logs are short-lived and are not joined to your account by us.
- Reader statistics: reader pages count views in aggregate (a number per share). Visitors to reader pages are not identified, receive no cookies from us, and are not tracked across pages or sites.
- Marketing-site analytics: on the public pages of
pagewell.ai(home, Explore, Docs, and these legal pages) we use Google Analytics 4 to count visits, pages viewed, referrers and approximate region. IP addresses are anonymised before storage; we do not enable advertising features or cross-site signals. Google Analytics is not loaded on reader pages (p.pagewell.ai), sandboxed documents or the signed-in console.
2.3 What we do not collect
We do not collect precise location, contacts, device identifiers or advertising identifiers, and we do not run advertising or social-media trackers on any page.
3. How we use personal information
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the Service: hosting, rendering and sharing your content, running the console, CLI and API | Performance of a contract |
| Billing and payment processing through Waffo Pancake | Performance of a contract |
| Customer support and handling your requests | Performance of a contract / legitimate interest |
| Service notices: billing, security, policy updates | Legitimate interest |
| Security, abuse and fraud prevention, including the audit log and content reports | Legitimate interest |
| Improving the Service using aggregate, de-identified usage figures | Legitimate interest |
| Complying with legal obligations (tax records, lawful requests) | Legal obligation |
We do not send marketing email. We may aggregate or de-identify data for statistics; such data can no longer identify you.
4. Cookies and similar technologies
| Name | Type | Purpose | Can be disabled |
|---|---|---|---|
__Host-pw_session | Strictly necessary | Keeps you signed in to the console (app subdomain only) | No — required to sign in |
__Host-pw_login | Strictly necessary | Ties an email sign-in code to the browser that asked for it; expires after 10 minutes | No — required to sign in by email |
pw_lang | Functional | Remembers the interface language you chose | Yes — clear it in your browser; we fall back to your browser language |
| localStorage on reader pages | Functional | Remembers reading preferences (theme, width) on your device only; never sent to us | Yes |
_ga, _ga_* | Analytics (Google Analytics) | Distinguishes visits on the marketing site only; expires after 2 years | Yes — block third-party cookies, use the Google Analytics opt-out add-on, or enable Global Privacy Control |
There are no advertising cookies. Reader pages set no cookies at all; the Google Analytics cookies appear only on the marketing pages listed in Section 2.2. Documents that contain scripts run on a separate sandboxed origin with outbound requests blocked, so a document's author cannot set trackers on you either.
5. Sharing and disclosure
We do not sell your personal information, including "selling" or "sharing" as defined by the CCPA/CPRA. We share personal information only in these situations:
- Service providers bound by data-processing agreements:
- Cloudflare, Inc. — hosting, storage, DNS and DDoS protection for every part of the Service (privacy policy).
- Waffo Pancake — payment processing and Merchant of Record for paid plans. Card data is processed exclusively by Waffo Pancake, which is PCI-DSS compliant; it never touches our servers. We receive only the identifiers, plan and status described in Section 2.1.
- Cloudflare, Inc. — also delivers our sign-in emails (Cloudflare Email Service)
- Google LLC — sign-in (Google Identity) and Google Analytics on the marketing site (privacy policy, how Google uses data from sites that use its services). Google's handling of your Google account is governed by Google's own privacy policy.
- Other users and the public: content you set to public is readable by anyone with its address and shown on your profile — together with your handle and display name. Unless you turn search indexing off (for a page, a space or your whole account), it is also listed on Explore and indexable by search engines and AI crawlers. Unlisted, code-protected and password-protected shares are shown only to people who hold the link, code or password.
- Legal and regulatory: when required by law, court order or a lawful request from a competent authority, or to defend our rights or the safety of readers.
- Business transfers: in a merger, acquisition or sale of assets, with advance notice and the same protections carried over.
- With your consent for any other purpose.
6. Security
- All traffic is encrypted in transit (TLS/HTTPS). The session cookie is
Secure,HttpOnlyand host-locked. - Agent tokens and share passwords are stored only as hashes; the plaintext is shown once and never again.
- Content with scripts is isolated on a separate origin with a strict Content Security Policy, so it cannot read your session or send data out.
- Access to production data is limited to the people who operate the Service, on a least-privilege basis.
- Every security-relevant action on your account is written to an append-only audit log you can inspect in the console.
If a security incident affects your rights, we notify you and, where required, the competent supervisory authority within 72 hours of becoming aware of it. Please keep your Google credentials and tokens to yourself; report concerns to support@pagewell.ai.
7. Retention
| Data | Retained for | Then |
|---|---|---|
| Account profile (email, name, picture, handle) | Life of the account, then 90 days | Deleted or anonymised |
| Published content and assets | Until you delete it; after account deletion, 90 days | Deleted; storage is recorded against the platform, never transferred to another user. Copies lawfully forked by other users while public remain in their spaces, attributed to you by author record only. |
| Anonymous guest uploads | 24 hours | The sharing link stops resolving at expiry; document metadata and storage references are removed automatically by maintenance, and unreferenced bytes are garbage-collected after a short safety cooldown. |
| Guest-upload IP HMAC and daily count | The current UTC day, until the next daily maintenance run | Deleted |
| Historical document versions | Per your plan's version limit, or until you delete them | Deleted |
| Sessions and agent tokens | Until revoked or expired; revoked entries 90 days | Deleted |
| Audit log (append-only) | 12 months | Deleted |
| Billing and transaction records | As required by tax and accounting law — typically 7 years | Deleted or archived |
| Support email and content reports | 2 years after the matter is closed | Deleted |
| Hosting request logs (Cloudflare) | Up to 30 days | Deleted |
Changing or cancelling a plan never deletes content — see the Terms of Service, Section 6.2.
8. Your rights
Depending on where you live you may have some or all of the following rights. To exercise them, email support@pagewell.ai from the address on your account; we respond within 30 calendar days.
| Right | What it means |
|---|---|
| Access | Get a copy of the personal information we hold about you. Your content is exportable at any time from the console (one-click zip export). |
| Rectification | Correct inaccurate or incomplete information — most of it you can edit yourself in the console. |
| Erasure | Have your account and personal data deleted, subject to Section 7. |
| Restriction | Pause processing in specific circumstances. |
| Portability | Receive your data in a machine-readable format — the export contains your original files and folder structure. |
| Objection | Object to processing based on legitimate interest. |
| Withdraw consent | Where processing is based on consent, withdraw it at any time. |
| Complain | Lodge a complaint with the data protection authority in your place of residence. |
You can keep your public pages out of search engines yourself, without writing to us: Settings → Profile → Search engines for your whole account, or the same switch on a space or a single page. Turning it off marks those pages noindex and removes them from our sitemap and the Explore page; search engines may take a while to drop results they already show.
California residents: we do not sell or share personal information, and we do not discriminate against you for exercising your rights.
9. Service communications
We send only the email needed to run the Service — sign-in and device-approval notices, billing receipts and renewal reminders, security alerts, over-quota notices and notices of changes to these documents. We do not send marketing email, so there is nothing to unsubscribe from; service emails cannot be turned off while you hold an account.
10. International transfers
The Service runs on Cloudflare's global network, so your data may be processed in data centres outside your country, including the United States. Our providers are bound by data-processing agreements that incorporate the EU Standard Contractual Clauses (and the UK Addendum where applicable), and we transfer data only to recipients that provide an equivalent level of protection.
11. Children
The Service is intended for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with information, contact support@pagewell.ai and we will delete it promptly.
12. Third-party links and content
Documents published on PageWell are written by their authors and may link to or embed third-party sites. This Policy covers only information we collect directly. We are not responsible for the privacy practices of authors' linked destinations or of any third-party service; review their policies before using them.
13. Changes to this Policy
For material changes we give at least 14 days' notice by email to the address on your account and update the "Effective" date at the top of this page. Continued use after the effective date constitutes acceptance. A dated version log is available on request.
14. Contact
- Privacy, legal, support and security: support@pagewell.ai — one mailbox, read by the Operator. Rights requests sent here reach the person who can act on them.
Version 1.2 · Effective 2026-10-11 · PageWell · https://pagewell.ai