Privacy policy · Pagestra

Who we are

Pagestra is run by OKNOS OD, Sarajevo, Bosnia and Herzegovina (“we”, “us”). This policy covers the Pagestra website and app at pagestra.com, and the pages, previews and funnel links we serve at pagestra.page and on customers’ own domains. For anything about your data, write to support@pagestra.com.

Two kinds of data, two roles

Your account. For the people who sign up and their teammates, we decide what is collected and why. We are the controller of that data.
Visitors to our customers’ pages. When someone visits a page a customer published with Pagestra, or sends a form on it, the customer decides what is collected and why. The customer is the controller, and we process that data on their behalf. If you visited such a page, the site’s owner is the one to ask about your data. We help them answer.

What we collect about you as a Pagestra user

Your account: your name, email address, company name and password. We store the password only as a one-way hash, never as you typed it. We also keep your time zone and how you like dates and times written.
Sign-in sessions: a random token in a cookie. We store only a hash of it, with the time it expires, 30 days after you sign in.
Your work: your projects, pages and every version of them, images and files, collections, funnels, offers, traffic sources, the domains you connect, your teammates and the invitations you send.
Connected AI apps: the name of each AI app you connect to Pagestra and the access tokens it was given, which we store only as hashes.
Billing: if you subscribe, Stripe takes your payment. We never see or store your card. We keep the IDs Stripe gives your customer record and subscription, your plan and whether it is paid.
The audit log: every change made in your organization, every sign-in and every refused attempt, with who did it, when, from which IP address and which browser. It never records passwords or secrets, nor the contents of collected records or files, and long texts are recorded only by a fingerprint (their SHA-256 hash).
Server logs: our web server records each request to pagestra.com and pagestra.page with the IP address, the time, the address asked for, the answer, the browser and the referring page, to keep the service secure.

Signing in with Google

If you choose to sign up or sign in with Google, we ask Google only for the basic sign-in permissions: openid, email and profile. Google then tells us your Google account ID, your email address, whether Google has verified it, your name and, for a work account, your organization’s domain.

We use them only to create your account and to sign you in. Your name becomes your account’s name, and your organization’s domain is only used to suggest a name for your workspace.
We store your Google account ID and the email address Google gave us, with when you first and last signed in with Google. We keep no Google access or refresh tokens, and we do not ask for or receive your contacts, files, calendar or any other Google data.
We never sell Google user data, share it with anyone, or use it for advertising.
You can disconnect Google in your account settings once your account has a password, or delete your account.

Pagestra’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we collect about visitors to customers’ pages

Every live page carries Pagestra’s visitor tracker, which records on behalf of the customer who published it:

Each visit: the IP address, the browser and device (from its user agent), the browser’s language, the country, and the page the visitor came from. We work out the country from the IP address on our own server, with MaxMind’s database, so the address is not sent anywhere else. On a site behind Cloudflare we take Cloudflare’s country instead.
Each page view: the page and time, the screen size, how long the page was actively used, how far down the visitor scrolled, which marked parts of the page they saw and clicked, how fast the page loaded, and which form fields they started to fill in. The tracker records the field, never what was typed in it.
Funnels: the traffic source and the ad’s parameters in the link the visitor arrived by, the steps they took, and the sales or sign-ups the customer reports to us, with their value and order number.
Forms: when a customer’s form sends its answers to Pagestra, we keep whatever that form asks for, for the customer.

We use this only to give the customer their reports and to run their funnels. We do not use it for our own purposes, combine it across customers or sell it. Customers must tell their visitors about it in their own privacy policy, and ask for consent where the law requires.

Why we use it

To provide the service you signed up for: your account, your pages, your reports, your plan, and the emails your account needs, such as password resets and invitations.
To keep the service secure and fair: the audit log, server logs and sign-in limits, and looking into abuse. These are our legitimate interests, and yours.
To meet legal duties: such as keeping billing records.

We do not sell personal data, and we do not use it for advertising.

Who else receives it

These services work for us and receive only what their job needs:

Hetzner Online (Germany): Hosts our servers and database, in its data centres in the EU.
Resend (United States): Sends our emails, such as password resets and invitations. It receives your email address and the message.
Stripe (United States, Ireland): Takes payments when you subscribe, under its own privacy policy for your card details.
Google (United States): Signs you in, if you choose Google. Makes images, if you ask Pagestra to generate or change one, and receives your description and the image to change. If reCAPTCHA is turned on, scores whether a visitor to a live page is a bot.
The AI app you connect: Claude, ChatGPT, Gemini or another app that you connect reads and changes your pages through Pagestra, on your instructions. What you share with it is covered by your own agreement with its provider.

We download country data from MaxMind and exchange rates from the European Central Bank, and send them nothing. We also disclose data when the law requires it. Where a service is outside the EU, it protects the data with the safeguards data protection law requires, such as the European Commission’s standard contractual clauses.

How long we keep it

Your account and your work: as long as your account exists. You can delete your account, or an owner can delete the organization, in account settings. That removes them, apart from what is listed below.
Images and page files that only a deleted organization used can stay in our file store until we clear it. Ask us and we remove them sooner.
Sign-in sessions: 30 days.
The audit log: for now, with no end date. It cannot be changed or deleted, so that nobody can hide what was done. We will set a period and update this policy.
Visitor statistics: for now, with no fixed end date. A customer can ask us to delete a project’s statistics at any time.
Server logs: 30 days. Backups: 14 days.
Billing records: as long as accounting law requires.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to receive a copy you can take elsewhere, and to object to or limit how we use it. You can change your profile and delete your account yourself, in account settings. For everything else write to support@pagestra.com, and we answer within a month.

You can also complain to a data protection authority: in Bosnia and Herzegovina, the Personal Data Protection Agency, or in the EU, the authority where you live or work.

If you visited a page published with Pagestra, ask the site’s owner first. They control that data, and we help them answer.

Cookies

pagestra.com uses no analytics or advertising cookies. The app uses only these:

pg_session: Keeps you signed in. 30 days.
pg_org: Remembers which organization you are working in. Until you close the browser.
sidebar_state: Remembers whether the app’s sidebar is open. 7 days.
__Host-pg_google: Protects a Google sign-in from forgery while it is under way. 10 minutes.
__Host-pg_google_signup: Holds what Google told us while you name your workspace. 30 minutes.

Your choice of light or dark theme is kept in your browser’s storage and never sent to us.

Live pages published with Pagestra set these, for the customer:

_vid: A random visitor ID, so the customer’s reports count a returning visitor once. 2 years.
_vtid: Groups one visit’s page views together. 30 minutes.
_pg_vid: Set by funnel links, so a visitor keeps one ID through a funnel’s steps. 2 years.

Security

Everything is served over HTTPS. Passwords, session tokens and access tokens are stored only as hashes. Customers’ pages run on their own domain, pagestra.page, apart from the app, so a page cannot reach your account. Access to our servers is limited to the people who run them.

Children

Pagestra is a tool for businesses and is not meant for anyone under 16.

Changes

We post every change here and update the date at the top. If a change matters to how your data is used, we also tell account holders by email before it takes effect.