Privacy Policy
Last updated 14 October 2026
Page Lemon (pagelemon.com) lets you and your AI agents publish static websites. Page Lemon is operated by Aporia Research Ltd (company number 17518971, registered in England and Wales), London N22 8NL, United Kingdom, which is the data controller for the personal data described here ("we", "us"). This policy explains what personal data we handle, why, how long we keep it and what rights you have.
Questions and privacy requests: support@pagelemon.com, or call +44 7554 248 000.
1. Short version
- We collect only what we need to run the service: your account email and name, the files you upload, and a little technical data to prevent abuse.
- We do not sell personal data, and we do not run ads.
- Sites we host for you have no ads, no tracking scripts and no cookies added by us (except a sign-in cookie on pages you protect). We count page views without cookies or scripts so you can see your visitor numbers. Free sites show a small "Live on Page Lemon" badge, which is plain HTML: no script, no cookies.
- When your site collects data from its visitors (form messages, bookings, members-only sign-ins), you control that data and we process it for you. See Data about your site's visitors.
- Our marketing site uses no trackers, and one cookie only if you pick a language (to remember it). The account portal uses only the sign-in cookies it needs to work.
- Our servers are in London. Site files and backups are stored in the EU.
2. Who is responsible
| Data | Our role | What this means |
|---|---|---|
| Your account, billing, API tokens, deploy history, support emails | Controller | We decide how this data is used and answer to you for it. |
| Personal data inside the sites you publish (and data about visitors to those sites) | Processor (on your behalf) | You decide what your site contains and are responsible for it, including any privacy notice your site needs. We only store and serve it under your instructions and these terms. |
| Anonymous uploads (no account) | Controller for the uploader's IP address and upload record; processor for the site content | |
| Messages sent through our contact form, and AI app connections you approve | Controller | We decide how this data is used and answer to you for it. |
Our Data Processing Agreement covers personal data in your sites, including sites published without an account. It forms part of our Terms whenever we process personal data on your behalf.
3. What we collect and why
| Data | Source | Purpose | Lawful basis (UK/EU GDPR) |
|---|---|---|---|
| Email address, name, profile picture (if Google sign-in) | You, via our sign-in provider Clerk (email or Google) | Create and run your account, sign you in, send service emails | Contract |
| API token (stored only as a one-way hash) | Generated by us | Let your AI agent deploy on your behalf | Contract |
| Site files you upload | You or your AI agent | Host and serve your site publicly (or behind a password if you set one) | Contract |
| Site passwords | You | Protect a site. Stored as a one-way hash; we cannot see the password | Contract |
| Deploy history (who deployed what, when) | Generated by us | Show history, allow rollback, investigate abuse | Contract; legitimate interests (security) |
| Email addresses of people you invite | You | Send the invitation and give them access | Legitimate interests (yours and ours in letting you collaborate) |
| IP address of anonymous uploaders | Your connection | Rate limits and abuse prevention | Legitimate interests (keeping the service safe) |
| Stripe customer and subscription IDs | Stripe | Link your account to your paid plan. We never receive or store card numbers | Contract; legal obligation (tax records) |
| Referrals: who invited whom, when the new customer first paid, and the credit each of you earned. To stop self-referral we compare card fingerprints from Stripe when the credit is due; we don't store them or any card numbers | You, when you sign up through an invite link; Stripe | Give both people their referral credit and prevent abuse | Contract; legitimate interests (preventing fraud) |
| Checkout consent records: the plan, price and renewal wording you agreed to, when, and your IP address shortened to its network part | You, when you start or change a paid plan | Show what you agreed to at checkout | Legal obligation (consumer law); legitimate interests (handling disputes) |
| Terms acceptance records: which version of our Terms you accepted, when, and how (the box when you sign up, keeping a site from its claim page, or publishing a new site whose reply showed you the Terms line), with your IP address shortened to its network part when we have it | You, when you accept the Terms | Show which Terms you agreed to | Contract; legitimate interests (handling disputes) |
| Promo codes you used | You | Apply the discount or plan, and limit each code's uses | Contract |
Server and CDN logs (IP, URL, time, user agent). On this website our server log drops everything after the ? in the address except the ref, invite and utm_ parameters, which tell us which link or campaign brought you | Your browser or agent, via Cloudflare and our servers | Keep the service running, secure and free of abuse | Legitimate interests |
| Support and abuse emails, and messages sent through our contact form (name, email, topic, message) | You | Answer you, handle reports | Legitimate interests; contract |
| AI app connections (which app you connected, such as ChatGPT or Claude, the permissions you approved, and a sign-in log with IP address) | You, when you approve a connection | Let the app act on your account, let you see and revoke connections, investigate misuse | Contract; legitimate interests (security) |
Data about your site's visitors
Some features collect personal data from the people who visit your site. For this data you, the site owner, are the controller and we are your processor: we store it, show it to you and the people you give access to (including AI apps you connect), and send the emails the feature needs. We do not use it for anything else. If your site collects personal data, your site needs its own privacy notice.
| Feature | What we store | How long |
|---|---|---|
| Forms (for example a contact form) | What the visitor types into the form (often a name, email address and message), when it was sent, and a one-way hash of their IP address for spam limits. We email a copy to the site's chosen recipients. A form can be set to email only: its messages aren't kept in your inbox. If the day's email allowance is used up, a message waits (at most until the next morning's summary email, and never more than 7 days) and is then deleted | Until you delete them. Binned messages are deleted 30 days later. If you remove the form or delete the site, its messages are deleted 30 days later. Copies queued for email are deleted 14 days after sending |
| Bookings | The booking details the visitor gives (name, and if given an email address, phone number, notes and answers to your questions), the time booked, and its status. We email the visitor about the booking when you confirm, change or cancel it | As for forms |
| Members-only sites and protected pages | The email addresses and company domains you allow, when each person last signed in, and a sign-in session. Visitors sign in with their email address on app.pagelemon.com, through our sign-in provider Clerk. The site then gets its own sign-in cookie through a single-use code; no sign-in script runs on your site | Until you remove the person or domain, or delete the site or your account. Sign-in sessions end after 30 days at most, or 1 day without use |
| Visitor numbers (analytics) | For each page view: the page, the referring site, country, device type and browser, and a visitor code made from a one-way hash of a shortened IP address and the browser with a key that changes every day. The key is stored temporarily outside the database, replaced when the day ends, and never included in database backups. No cookies, no script, no full IP address. We skip visitors whose browser sends Do Not Track or Global Privacy Control | Single page views: 30 days. Daily totals: as long as your plan shows history (up to 2 years), and deleted 30 days after the site is deleted |
Getting visitor data deleted. Site owners can delete messages and bookings in the Page Lemon app or through a connected AI, remove members, remove a form, or delete the site. Visitors: ask the site owner, who controls the data. If you can't reach them, email support@pagelemon.com and we will pass your request on.
Fonts on sites. Templates and AI-made sites may load third-party fonts such as Google Fonts, which sends visitors' IP addresses to Google. As the site owner you can self-host the fonts instead.
Our leak guard automatically scans uploads for things that look like secret keys and blocks the upload, to protect you. It does not send your files anywhere.
We do not use your data for advertising, sell it, or use your site content to train AI models.
4. Who we share it with
Only with the service providers listed in our subprocessors list (Cloudflare, DigitalOcean, Clerk, Stripe, Resend and, if you sign in with Google, Google), each under a contract that limits their use of the data. We may also disclose data if the law requires it, to protect people from harm, or as part of a sale or reorganisation of the business (we would tell you first).
5. International transfers
Our servers are in London (UK). They hold the account database and a cache of site files. Site files are stored in the EU, and so are database backups. Some providers process data in the United States (Clerk, Stripe, Resend, and Cloudflare's global network). Our operator, Aporia Research Ltd, is in the UK. Where personal data leaves the UK for a country without UK adequacy regulations, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the provider's EU Standard Contractual Clauses, or on the UK-US data bridge where the provider is certified under the Data Privacy Framework. For EU data we rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account is open. Deleted within 30 days of account closure, except billing records, then gone from backups 7 days later |
| Anonymous sites | 72 hours unless claimed, then deleted; files removed within 7 days after expiry |
| Deleted sites | Files and history removed within 7 days of deletion |
| Backups | Database backups (accounts, form messages, bookings, members, visitor numbers): rolling 7 days, so data deleted from the database leaves the backups 7 days later. Site files have no separate backup copy: once removed from storage, they are gone |
| Anonymous uploader IP (rate-limit table) | Up to 30 days (rate limits and abuse reports), then deleted |
| Server/CDN logs | A short period, not more than 30 days |
| Billing records (Stripe IDs, invoices) | 7 years, for tax and accounting law |
| Support and abuse emails | Up to 2 years, longer if needed for a legal claim |
| Contact form messages | 12 months after we handle them. Messages we never handled: 24 months |
| AI app connections | Until you revoke the connection or close your account. Sign-in log: 1 year |
| Data about your site's visitors | See Data about your site's visitors |
| Invitations | Until accepted or revoked |
| Checkout consent records | 3 years after the plan ends, for disputes and consumer-law claims |
| Terms acceptance records | 3 years after your account is deleted, for disputes and consumer-law claims |
| Referrals and promo codes used | While your account is open; credit records with billing records (7 years) |
| Security and audit logs (staff actions, site transfers) | 2 years, longer if needed for a legal claim |
Deleting is permanent. When you delete a site, a message or your account, we can't restore it. Copies leave our systems on the timings above (backups included); they are not kept so that we can bring them back.
7. Your rights
We handle your personal data under the UK GDPR and the Data Protection Act 2018, as the data controller. Wherever you live, you have the right to:
- access your personal data and get a copy of it;
- rectification: have wrong or incomplete data corrected;
- erasure: have your data deleted;
- restriction: ask us to limit how we use your data;
- portability: get your data in a common, machine-readable format, or have it sent to another provider;
- objection: object to us using your data on the basis of legitimate interests;
- not be subject to solely automated decisions with legal effects (we make none);
- complain to the Information Commissioner's Office (ICO), the UK regulator, at ico.org.uk.
Email support@pagelemon.com from your account email. We reply within one month. It is free unless a request is clearly excessive.
- United States: we do not sell or "share" personal information for targeted advertising. We are not currently a "business" under the California Consumer Privacy Act (we are below its thresholds), but we honour the requests above for everyone.
If your request concerns data inside someone else's site, we will pass it to the site owner, who is responsible for it.
8. Security
- All traffic is encrypted (TLS) through Cloudflare, which also protects against attacks.
- Passwords for sites and API tokens are stored only as one-way hashes. Sign-in is handled by Clerk; we never see your account password.
- No card data touches our servers (Stripe handles payment).
- Uploads are scanned for leaked secret keys.
- Access to production servers is limited to named staff using SSH keys.
- Encrypted backups are kept in the EU and expire as described in section 6.
If a breach is likely to put you at risk, we will tell you and the relevant regulator as the law requires (UK/EU: regulator within 72 hours). Report security issues to support@pagelemon.com.
9. Cookies
- pagelemon.com (marketing site): one cookie only,
pl_lang, and only if you choose a language with the language menu. It remembers that language for a year so the site opens in it next time. It is strictly necessary for something you asked for, so it needs no consent. No analytics, no trackers. - app.pagelemon.com (account portal): only the strictly necessary session cookies set by Clerk to keep you signed in and protect against fraud. These do not need consent, so there is no cookie banner.
- Sites on pagelemon.dev: we add no cookies. A site's owner may add their own; ask them.
- Password-protected and members-only sites: a strictly necessary cookie remembers that you entered the password or signed in.
- Visitor numbers: counted on our servers without cookies or scripts.
If we ever add analytics or other non-essential cookies, we will update this section and ask for consent where the law requires it.
10. Children
Page Lemon is not for children. You must be at least 18 to create an account or upload a site. If you believe a child has given us personal data, email support@pagelemon.com and we will delete it.
11. Changes
We will post any change here and update the date. For significant changes we will email account holders before they take effect.
12. Contact and complaints
Email support@pagelemon.com first; we want to fix any problem. You can also complain to a regulator:
- UK: Information Commissioner's Office (ICO), ico.org.uk
- EU/EEA: the data protection authority in your country (list at edpb.europa.eu)