Pagen

Privacy Policy

Last updated: 2026-07-07

Pagen ("we", "us"), operated by Momentum Apps, lets you publish Markdown or HTML you create — often with the help of an AI assistant — as a shareable web page, either public or protected by a passphrase. This policy explains exactly what data we collect, why, who we share it with, and the choices you have.

1. What we collect

• Publisher account — your email address, captured when you sign in via a magic link. We do not store a password for normal accounts.
• Artifacts you publish — the title and full content (Markdown or HTML) of each page, its visibility (public/private), and a bcrypt hash of the passphrase for private pages (never the passphrase itself).
• Recipient addresses — for a private artifact, the email addresses you ask us to invite. We use these only to deliver the invitation and to keep an access/send audit for that artifact.
• View analytics — for each page view we record a timestamp, the referring URL (if any), and a coarse country derived from a CDN header. We do not store IP addresses.
• Plan & billing status — your plan (Free/Pro/Team), subscription status, renewal date, and a customer identifier from our payments provider. We never see or store your card details.
• Marketing preference — whether you opted in to product tips/updates, and when.

2. Why we use it

• To provide the service — store and render your artifacts, gate private pages, enforce plan limits.
• Transactional email — magic-link sign-in, private-artifact invitations, passphrase-rotation notices, and billing/receipt messages. These are required to operate your account and are sent regardless of marketing preference.
• Product updates — occasional tips and announcements, only if you explicitly opt in. Every such email has a one-click unsubscribe.
• Aggregate analytics — to show you view counts and trends for your own artifacts, and to understand product usage in aggregate.

3. Subprocessors

We share the minimum data necessary with the following providers:

Provider	Purpose	Data received	Policy
Polar	Merchant of record — payments, invoices, tax	Your email + purchase/subscription data	polar.sh/legal/privacy
Resend	Transactional & opt-in email delivery	Recipient email + message content	resend.com/legal/privacy-policy
Railway	Application hosting	Request data in transit	See your hosting provider's policy
Railway	Database hosting	Stored account & artifact data	See your database provider's policy

4. Recipients of shared artifacts

If you publish a private artifact, the people you invite are not our users — we process their email addresses solely to deliver the invitation and maintain a delivery/access audit for that page. A recipient can ask to be removed from an artifact's audit and suppressed from future email by contacting support@pagen.app.

5. Use through an AI assistant

When you use Pagen through ChatGPT, Claude, Gemini, or another AI client, the assistant transmits your tool-call inputs (for example, the artifact content, title, and recipient emails you ask it to publish) to our servers. We do not receive your conversation history — only the specific inputs of the tool call the assistant makes. Your use of the AI platform itself is governed by that platform's own privacy policy.

6. Cookies

We use only functional cookies, no tracking or advertising cookies:

• Dashboard session — a signed, HTTP-only cookie that keeps you signed in to your dashboard.
• Per-artifact unlock — a signed, HTTP-only cookie scoped to a single private artifact's URL, set after you enter its passphrase, so you don't have to re-enter it.

7. Retention

• Account and artifact data is kept until you request deletion.
• Unpublished (deleted) artifacts are purged from backups within 30 days.
• Raw analytics events are deleted after 12 months; aggregate counts may persist.

8. Your rights

Wherever you live — including under the EU/UK GDPR and India's DPDP Act — you can request access, a copy (export), correction, or deletion of your personal data. Email support@pagen.app and we will respond within 30 days. We do not sell personal data, and we do not use it for automated decisions with legal effects.

9. Children

Pagen is not directed to children under 13, and we do not knowingly collect their data.

10. Changes & contact

We may update this policy; material changes will be reflected in the "last updated" date above and, where appropriate, announced by email. Questions: support@pagen.app. Governing law: {{JURISDICTION}}.