Privacy Policy
Last updated: February 6, 2026
1Information We Collect
Account information. When you create an account we collect your email address and a hashed password. We never store passwords in plain text.
Social media data. When you connect a Facebook or Instagram page through Meta OAuth, we access your page name, category, bio, profile picture, follower count, and recent posts (including images and captions). We store a page-specific access token so we can sync your content. We do not access your personal Facebook profile, private messages, or friend list.
Usage data. We log anonymous usage metrics such as pages visited, features used, and AI generation counts to improve the product. We collect IP addresses for rate limiting only and do not use them for tracking.
2How We Use Your Information
- Generate and host your website using content from your connected social pages.
- Authenticate you and enforce plan limits (AI refinements, image counts).
- Send transactional emails related to your account (password resets, billing).
- Improve our AI models and product experience.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3Third-Party Services
We use the following third-party services to operate:
Meta Platform (Facebook/Instagram) — to import your social page data via their Graph API under their Data Policy.
Vercel — for hosting, deployment, and AI website generation.
Railway — for database hosting (PostgreSQL).
Each provider has their own privacy policy. We only share the minimum data necessary for each service to function.
4Data Retention & Deletion
We retain your account data and generated websites for as long as your account is active. If you delete your account, we will remove your personal data and connected social tokens within 30 days. Generated websites will be taken offline immediately.
You can disconnect your Meta account at any time from your account settings, which will revoke our access and delete stored tokens.
5Cookies
We use essential cookies for authentication (session tokens) only. We do not use advertising or tracking cookies. No cookie banner is required because we do not use non-essential cookies.
6Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, object to processing, or request data portability. To exercise these rights, contact us at privacy@pagetowebsite.com.
7Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or through a notice on our website. Your continued use of PageToWebsite after changes constitutes acceptance of the updated policy.
8Contact
If you have questions about this Privacy Policy, contact us at privacy@pagetowebsite.com