Privacy Policy | Pagecart

This Privacy Policy describes how Pagecart ("we", "us", "our") collects, uses, and shares information when you use our platform - whether as a merchant running a store, or as a customer browsing or buying from a store built on Pagecart.

1. Information we collect

From merchants: account details (name, email, password hash), store information (store name, domain), and content you upload (products, media, pages).

From customers: order and shipping details you provide at checkout, and payment information, which is collected and processed directly by Stripe - we never see or store full card numbers.

Automatically: we don't use cookies. Your browser session is kept alive using localStorage (a login token, and small UI preferences like sidebar/theme state) rather than a cookie. This data stays on your device and is only sent to our servers as an explicit Authorization header when you make a request, not automatically attached to every request the way a cookie would be.

2. How we use information

to operate your store and process orders;
to send transactional email (email verification, password resets, staff invitations, and form-submission notifications) via our email provider, Resend;
to host product/media images via our media provider, Cloudinary;
to provide customer support when you contact us; and
to detect and prevent abuse of the Service.

3. How we share information

We share information only as needed to run the Service:

Stripe - payment processing for orders, via each merchant's own connected Stripe account;
Resend - delivery of transactional email;
Cloudinary - hosting of uploaded product/media images;
Hosting/infrastructure providers - to run the application and store data.

We do not sell personal information to third parties.

4. Data retention

We retain account and order data for as long as your store is active, and as needed to comply with legal, tax, or accounting obligations after a store closes.

5. Your rights

Depending on where you're located, you may have rights to access, correct, or delete your personal information, or to object to certain processing. Contact us through the support option in your dashboard to make a request.

6. Security

Passwords are one-way hashed, never stored in plain text. Access to merchant dashboards requires authentication, and each store's data is isolated from every other store.

7. Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from children.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

9. Contact

Questions about this Privacy Policy? Contact us through the support option in your dashboard.