Privacy Policy

PageFork is operated by a sole proprietor (egyéni vállalkozó) registered in Hungary, EU VAT number HU92463251 (“we,” “us,” or “our”). This Privacy Policy explains how we handle personal information when you use our website at pagefork.ai, our web application at app.pagefork.ai, and related services (collectively, the “Service”).

The controller of your personal information is the operator described above; its full name and address are sent on request. Contact us about privacy at support@pagefork.ai.

Information we collect

• Account and profile data — name, email address, password (hashed), and other details you add to your account. If you sign in with Google or Apple, we receive your name and email address from them.
• Content you provide — prompts, text, files, brand assets, and any other material you upload or generate through the Service, including content produced by our AI features.
• Usage and device data — log data, approximate location derived from IP, browser type, device identifiers, and interactions with the Service (e.g. pages viewed, feature usage).
• Billing — if you subscribe to a paid plan, payment and billing information is processed by our payment provider; we do not store full payment card numbers on our servers.
• Communications — messages you send to us (e.g. support@pagefork.ai) and your communication preferences.
• Leads and form data — what visitors submit through forms on sites you build with PageFork, the lead and contact records you keep about them (names, email addresses, phone numbers, notes, follow-ups, tags and custom fields), and cookieless visit statistics for your published sites. See Data you collect through PageFork.
• Connected accounts — when you connect a Google account, Kit, Mailchimp, Zapier or Make, the credentials needed to deliver your leads there (OAuth tokens or API keys). These are stored encrypted and never shown back in full.

How we use information

We use personal information to:

• Provide, maintain, and improve the Service, including AI-powered generation and hosting;
• Authenticate users, prevent fraud and abuse, and protect security;
• Process transactions and send related notices;
• Respond to your requests and provide customer support;
• Analyze usage in aggregate to improve the product and develop new features;
• Comply with legal obligations and enforce our Terms of Service;
• Send service-related and, where allowed, marketing messages (you can opt out of marketing).

AI and automated processing

PageFork uses third-party model providers to generate and edit content based on your prompts. Your prompts, the files you attach and the content being edited are sent to those providers (see subprocessors) to produce the result. We do not train AI models on your content ourselves. If this changes, we will update this policy.

Data you collect through PageFork

When visitors submit a form on a site you publish with PageFork, or when you add, import or receive leads through PageFork, you are the controller of that personal data and PageFork processes it on your behalf, as your processor. We use it only to provide the Service to you: to store it, show it to you and your team, deliver it to the destinations you configure, and keep the Service secure. We do not use your leads’ data for our own marketing, we do not sell it, and we do not use it to train AI models.

The same applies to the built-in analytics for your published sites. They use no cookies and store no IP addresses. For each page view we keep the page path, the referring website’s domain, any UTM campaign tags and a device class (desktop, mobile or tablet). To count unique visitors, we combine the visitor’s IP address and device class with a secret key into a code that changes every day and cannot be turned back into the IP address.

You are responsible for having a lawful basis for collecting it, for telling your visitors how you use it (for example in your own site’s privacy notice), and for any consent required before you add people to mailing lists or send them marketing.

You can correct, export, archive or permanently erase a person’s data from the Leads page. If one of your visitors contacts us directly, we will refer them to you and help you respond. Our data processing agreement is part of our Terms of Service and applies automatically.

Integrations you connect

PageFork can send your leads to tools you choose: Google Sheets, an email address you verify, Kit, Mailchimp, Zapier, Make, or a webhook URL you control. We send data only to destinations you or your team set up, only for the forms and events you select, and only the fields described in our destination documentation. Once delivered, that data is governed by the receiving service’s own terms and privacy policy.

You can pause or delete a destination, revoke an API key, or disconnect an account at any time. Revoking an API key also removes the Zapier and Make connections it created.

Google user data

If you connect a Google account to deliver leads to Google Sheets, PageFork requests only these permissions:

• See, edit, create and delete only the Google Drive files PageFork creates (drive.file). PageFork cannot see or open any other file in your Google Drive.
• Your email address (openid, email), to label the connected account in your team settings.

We use this access only to create the spreadsheet for a destination you set up and to add a row for each new form submission. We do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as needed to provide this feature or as required by law, and we do not use it to develop, improve or train generalised AI or machine learning models. Our staff do not read it unless you ask us to for support, it is necessary for security, or the law requires it.

PageFork’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Access tokens are stored encrypted. When you disconnect the account on the Team page, we revoke PageFork’s access with Google and delete the stored tokens. You can also remove PageFork’s access at any time from your Google Account’s security settings. Spreadsheets already created stay in your Google Drive and remain yours.

Legal bases (EEA, UK, Switzerland)

Where the GDPR or similar law applies, we rely on:

• Contract — to create your account, provide the Service, process payments, and deliver your leads to the destinations you set up;
• Legitimate interests — to keep the Service secure, prevent fraud and abuse (including reCAPTCHA on sign-up and sign-in), understand in aggregate how the Service is used, and send service messages, balanced against your rights;
• Legal obligation — to keep invoices and accounting records, and to answer lawful requests from authorities;
• Consent — for analytics and advertising cookies on pagefork.ai and for marketing emails, which you can withdraw at any time.

Sharing and subprocessors

We may share information with:

• Service providers who host our infrastructure, process payments, send email, or provide analytics, subject to contracts that limit their use of data;
• AI and machine-learning vendors that power generation features;
• The destinations you configure, as described in Integrations you connect;
• Professional advisors (e.g. lawyers, accountants) when necessary;
• Law enforcement or other parties when required by law or to protect our rights and users’ safety.

Our subprocessors are:

• Google (Google Ireland Limited and Google LLC) — AI generation, sign-in with Google, bot protection (reCAPTCHA), delivery to Google Sheets when you connect it, and, with your consent, Google Analytics, Google Tag Manager and Google Ads conversion measurement on pagefork.ai;
• OpenAI — AI generation;
• Resend — transactional email, including form notifications and email destinations;
• Stripe — payments;
• Billingo — invoicing;
• Apple — sign-in with Apple, if you use it;
• Hetzner Online — application hosting and database;
• Cloudflare — file storage, hosting of published sites, DNS, SSL certificates and custom domains.

Kit (ConvertKit), Intuit Mailchimp, Zapier and Make receive data only when you connect them as destinations, and act on your instructions under their own terms.

We do not sell your personal information as “sell” is defined under U.S. state privacy laws.

Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements.

You can delete your account yourself on the Account page in the app. We then anonymize your profile and delete any team you are the only member of, together with its sites, leads and media. Invoices and the payment records behind them are kept for 8 years, as Hungarian accounting law requires.

Leads and form data are kept until you delete them, erase the person, or delete the team. Delivery logs for destinations are kept for 30 days.

Security

We use technical and organizational measures designed to protect your information. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

International transfers

Some subprocessors, including OpenAI, Google, Stripe, Resend and Cloudflare, may process data in the United States or other countries outside the European Economic Area. For those transfers we rely on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the EU Standard Contractual Clauses (and their UK and Swiss equivalents).

Your rights and choices

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal information;
• Object to or restrict certain processing;
• Data portability;
• Withdraw consent where processing is consent-based;
• Lodge a complaint with a data protection authority.

To exercise these rights, contact us at support@pagefork.ai. We may need to verify your identity before responding. We reply within one month, which we may extend by two further months for complex requests; if we do, we tell you why within the first month.

Our lead supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11, naih.hu. You can also complain to the authority in the country where you live or work.

U.S. residents: state laws may offer additional rights (e.g. California’s CCPA/CPRA). We honor applicable requests as required by law.

Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have such information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. For material changes, we will provide additional notice as appropriate (e.g. email or in-app notice).

Contact

Questions about this policy: support@pagefork.ai