Privacy Policy

PageCraft (“we”, “our”, or “us”) operates the website pagecraft.ca and the PageCraft platform (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, and password when you register.
• Organisation details: organisation name and any information you add when setting up a workspace.
• Billing information: payment details processed securely by Stripe. We do not store full card numbers.
• Content: blog posts, images, templates, and other content you create or upload through the Service.
• Communications: messages you send us via email or support channels.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, actions taken, and timestamps.
• Device & log data: IP address, browser type, operating system, referring URLs, and error logs.
• Cookies & similar technologies: see our Cookie Policy for details.

1.3 Information from Third Parties

We may receive information about you from third-party services you connect to PageCraft (e.g., OAuth providers) or from payment processors such as Stripe.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process transactions and send related information (receipts, invoices).
• Send transactional and administrative emails (account verification, password resets, team invitations).
• Respond to comments, questions, and support requests.
• Monitor and analyse usage trends to improve the Service.
• Detect, prevent, and address technical issues, fraud, or abuse.
• Comply with legal obligations.
• Send product updates or marketing communications — you may opt out at any time.

3. How We Share Your Information

We do not sell your personal information. We may share it in the following circumstances:

• Service providers: trusted third parties that help us operate the Service (e.g., Stripe for payments, Resend for email, cloud storage providers). These parties are contractually obligated to protect your data.
• Team members: information you share within an organisation workspace is visible to other members of that organisation according to their assigned roles.
• Legal requirements: if required by law, court order, or governmental authority.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• With your consent: in any other case, with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.

5. Data Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data (“right to be forgotten”).
• Portability: request a machine-readable export of your data.
• Objection / Restriction: object to or request restriction of certain processing activities.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email us at hello@pagecraft.ca. We will respond within 30 days.

7. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. International Data Transfers

PageCraft is based in Canada. If you access the Service from outside Canada, your information may be transferred to and processed in Canada or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

9. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: