# Privacy and your data

What Page Lemon keeps about you and your visitors, how to get a copy or delete it, and what your own site needs to say. The full details are in our [Privacy Policy](/privacy).

## Say this to your AI

```prompt
What does Page Lemon store about the visitors to my site?
```

Your AI can also act on your data for you: "Bin the form messages from last year", "Download my bookings as a spreadsheet", "Delete my site".

## What happens to your data

- **Your account:** your email address and name, your plan, and the AI connections you approved. Tokens and site passcodes are stored only as one-way hashes, so nobody can read them back.
- **Your sites:** the files you publish and their version history, for as long as your plan keeps history.
- **We don't** use your data for advertising, sell it, or use your site content to train AI models.

> **Plans:** the same on every plan. Paid plans keep longer version and analytics history; see [Plans and billing](/docs/billing).

## Your visitors' data

When your site has a form, bookings or members-only pages, your visitors give personal data to you. You decide what your site collects; Page Lemon stores it for you and uses it for nothing else.

| Feature | What's stored |
|---|---|
| [Forms](/docs/forms) | What the visitor types, when, and a one-way hash of their IP address for spam limits. Or nothing at all, if you choose email only |
| [Bookings](/docs/bookings) | The booking details the visitor gives, the time booked and its status |
| [Members-only](/docs/private-sites) | The emails and company domains you allow, and when each person last signed in |
| [Analytics](/docs/analytics) | Pages, sources, countries and devices, with no cookies and no full IP address |

> **Important:** if your site collects personal data, for example through a form or bookings, your site needs its own privacy notice that says so. Ask your AI to write one for your site and check it fits your situation.

- **Fonts:** templates and AI-made sites may load fonts from Google Fonts, which sends visitors' IP addresses to Google. Ask your AI to put the font files in your site instead.
- **A visitor wants their data deleted:** delete their messages or bookings in your account or by asking your AI. Visitors who can't reach a site owner can email us and we pass the request on.

## Get a copy or delete it

- **Your sites:** each site's **Settings** → **Download .zip**, or ask your AI to download it.
- **Form messages and bookings:** export them as a spreadsheet from the site's **Messages** or **Bookings** tab, or ask your AI.
- **Your whole account:** **Account settings** → **Profile** → **Delete account**. Account data is deleted within 30 days, except billing records the law requires us to keep.
- **A copy of everything we hold about you, or a correction:** email [support@pagelemon.com](mailto:support@pagelemon.com).

## Where it's kept

Our servers are in London, UK. Site files and encrypted backups are stored in the EU. The companies that process data for us are listed on [Subprocessors](/subprocessors). How we protect it: [Security](/security) and [Trust](/trust).

Data protection terms for business customers: our [DPA](/dpa).