Privacy Policy

Last updated: 11 August 2026 · Compliant with the Protection of Personal Information Act 4 of 2013 (POPIA).

1. Responsible party

For the purposes of POPIA, the responsible party is:

• Name: PageStack
• Email (privacy enquiries and Information Officer): support@pagestack.co.za
• Physical address: available on written request to the email address above.

2. Personal information we collect

• Account information: your name and email address, collected through our sign-in provider when you register.
• Content you provide: prompts and descriptions you submit, sites you import or generate, saved versions, feedback messages, and optional screenshots attached to feedback.
• Billing information: if you subscribe to a paid plan, payment is handled by our payment provider; we do not store your card details.
• Technical information: IP address, browser type, and basic usage logs generated when you use the Service.
• Custom-domain information: domain names you connect and their DNS verification status.

3. Purpose of processing

We process personal information to:

• create and administer your account and authenticate you;
• provide the Service — generating, hosting, versioning, and publishing your websites;
• process payments and manage subscriptions;
• respond to support requests and feedback;
• secure the Service, prevent abuse, and comply with legal obligations;
• communicate service notices (and, only with your consent, marketing — see clause 9).

4. Lawful basis

We process personal information in terms of section 11 of POPIA where: processing is necessary to perform our contract with you; it is required by law; it protects your or our legitimate interests; or you have consented. We collect information directly from you, and only what is adequate, relevant, and not excessive for the purposes above.

5. Sharing and operators

We do not sell personal information. We share it only with service providers (“operators” under POPIA) who process it on our behalf under appropriate safeguards:

• Authentication: our sign-in provider (Clerk) manages account credentials and sessions.
• Hosting and infrastructure: our hosting provider stores application data and serves your published sites.
• AI processing: prompts and site content are processed by our AI model provider to generate websites.
• Payments: our payment provider processes billing transactions.
• Email: our email provider delivers transactional messages.

We may also disclose information where required by law, a court order, or a competent public authority.

6. Cross-border transfers

Some of our operators are located outside South Africa. Where personal information is transferred across borders, we do so in accordance with section 72 of POPIA — only to recipients subject to laws or binding agreements providing an adequate level of protection substantially similar to POPIA, or where the transfer is necessary to perform our contract with you.

7. Security safeguards

In terms of section 19 of POPIA, we maintain appropriate, reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), authenticated access controls, and hosting with reputable providers. If a data breach occurs that affects your personal information, we will notify the Information Regulator and affected users as required by section 22 of POPIA.

8. Retention

• Account and site data is kept for as long as your account is active.
• Version-history snapshots are automatically pruned after a retention period.
• When you close your account, we delete or de-identify your personal information within a reasonable period, unless we are required by law to retain it (for example, financial records).

9. Direct marketing

We will only send you direct marketing by electronic means with your consent, as required by section 69 of POPIA, and every message will include a simple way to opt out. Service and account notices (for example, billing or security notifications) are not marketing.

10. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in and to secure the Service. We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling them may prevent sign-in from working.

11. Children

The Service is not directed at children under 18. We do not knowingly process children's personal information without the consent of a competent person, as required by section 35 of POPIA. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Your rights under POPIA

You have the right to:

• Access — request confirmation of, and access to, the personal information we hold about you (also under the Promotion of Access to Information Act 2 of 2000);
• Correction — request that inaccurate or outdated information be corrected;
• Deletion — request deletion or destruction of information we are not entitled or required to retain;
• Objection — object, on reasonable grounds, to processing of your information;
• Withdraw consent — where processing is based on consent, withdraw it at any time;
• Complain — lodge a complaint with the Information Regulator.

To exercise any of these rights, email support@pagestack.co.za. We will respond within a reasonable time and may need to verify your identity first.

13. The Information Regulator (South Africa)

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on the website or by email, and the “last updated” date above will change. The current version always applies.