A small number of providers process data for us, each for one job. This is the list from section 6 of the privacy policy, which is the authority; when the policy changes, it changes first.
| Supabase | Our database, file storage and sign-in. Holds your account, your listing and screenshots, your pages and the encrypted key, in its us-west-2 region (Oregon, United States). |
|---|---|
| Vercel | Hosts this site and the app, and keeps their server logs. |
| Fly.io | Runs the engine that reads listings, studies screenshots and draws pages, in the United States. |
| OpenAI | The models that write headlines, briefs, page plans and translations, read the layout of a screenshot, and draw a screenshot where your own cannot be set to the standard. Receives your listing text, your public reviews, the public listings of competitors you follow, and your screenshots. |
| TypeSafe AI | A classification model that answers short questions about your listing and screenshots: whether a line makes a claim, which screen suits which search. Receives the text and screenshots those questions are about. |
| Resend | Sends our email: sign-in links, the two optional emails, and your feedback and reports to us. |
| Stripe | Takes payment on its hosted checkout and billing portal, and holds your card and billing details. We hold only its customer and subscription ids. |
| Apple | App Store Connect receives, through the key you provide, the reads and writes described in the terms. Apple’s public App Store lookup and search receive the app ids and names looked up for previews, listings and competitors, with no key. |
| Google Fonts | Only inside the app, when you pick a typeface for your screenshots: your browser loads that font from Google, so Google sees that request. The fonts of this site itself are served from our own servers. |
What applies to all of them
- Each receives only what its job needs, and may use it for nothing else.
- We do not sell personal information, we do not share it for advertising, and we do not combine one customer’s data with another’s.
- Data is encrypted in transit and at rest with our providers, and stored and processed in the United States.
- What is never sent to a model provider: your App Store Connect key, your email address, your payment details, anything from another customer, and the name of a competitor as something to write about.
- We use the model providers through their business APIs, not their consumer products. Under OpenAI’s API terms, data sent through the API is not used to train OpenAI’s models. Where any provider offers a choice about training on customer data, we do not permit it.
- Beyond these, we share information only if the law requires it, to protect someone’s safety or our rights, or, if Pagefully is ever sold or merged, with the new owner, who would be bound by the policy.
What is not on the list
- No analytics service. The site loads no analytics scripts, tracking pixels or advertising tags.
- No advertising network.
- No separate support tool. Feedback and reports reach us as email, through Resend, and sit in our mailbox.
How these providers fit into the whole is in How Pagefully protects your data; what is collected in each situation is in What data Pagefully collects and why.