Legal
Privacy Policy
Last updated: March 1, 2026
PageForge (“we”, “us”, “our”) is operated by Paolo Tozzo, based in Bulgaria, as a solo-run SaaS product. This policy explains what data we collect, why, and how we handle it. We keep it short and in plain language.
1. What we collect
Account data. When you sign up, we collect your email address and a password. Your password is hashed with bcrypt before storage — we never store or see your plaintext password.
Project data. When you use PageForge, we store your CSV uploads (as structured data), column mappings, generation settings, and the AI-generated page content. This data is tied to your account.
Analytics. Our marketing site (www.getpageforge.com) uses Google Analytics, which is loaded only after you consent via our cookie banner. The application (app.getpageforge.com) uses Vercel Analytics, which is privacy-friendly and does not use cookies or collect personally identifiable information.
2. How we use your data
We use your data to:
- Authenticate you and manage your account
- Store and process your projects (CSV uploads, mappings, generated content)
- Send transactional emails (verification, password reset)
- Understand how our marketing site is used (via analytics, with consent)
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties for their own purposes.
3. Third-party services
We use the following services to operate PageForge. Your data may be processed by them as part of delivering the service:
- Supabase — database hosting (stores your account and project data)
- OpenAI — AI content generation (your CSV row data is sent to OpenAI's API to generate page content; OpenAI does not use API inputs for model training)
- Vercel — application hosting and privacy-friendly analytics
- Google Analytics — marketing site analytics (only with your consent)
- Resend — transactional email delivery (verification and password reset emails)
4. Cookies
Our marketing site uses a cookie consent banner. If you accept, Google Analytics cookies are activated. If you decline, no tracking cookies are set.
The application itself does not set tracking cookies. Your authentication token is stored in your browser's localStorage, not as a cookie.
5. Data retention
Your account and project data is retained as long as your account is active. If you delete your account, we will delete your data within 30 days. Backups may retain data for up to 90 days before being rotated.
6. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for analytics tracking
To exercise any of these rights, email us at privacy@getpageforge.com.
7. Data security
Passwords are hashed with bcrypt. Data is transmitted over HTTPS. Database access is restricted to the application layer. We do not store plaintext credentials.
8. Children
PageForge is not intended for use by anyone under 16. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site. Continued use after changes constitutes acceptance.
10. Contact
If you have questions about this policy or how we handle your data, email privacy@getpageforge.com.