Privacy Policy

Last updated: February 2026

At PageBolt, we take your privacy seriously. This policy explains what information we collect, how we use it, and how we protect it. We've written it in plain English so you can understand exactly what's happening with your data.

Information We Collect

We collect only the information necessary to provide and improve our service:

  • Account Information: When you sign up, we collect your email address and a password (which is hashed and never stored in plain text).
  • API Usage Logs: We automatically log each API request you make, including:
    • The endpoint you called (e.g., /v1/screenshot, /v1/pdf)
    • The HTTP status code returned
    • Response time (how long the request took)
    • Timestamp of the request
    We do not log the content of your requests (like URLs or HTML you're processing) unless there's an error that requires debugging.
  • Billing Information: If you upgrade to a paid plan, Stripe handles all payment processing. We never see or store your credit card details. Stripe provides us with your billing address and payment status only.

How We Use Your Information

We use the information we collect to:

  • Provide and maintain the PageBolt API service
  • Process your API requests and deliver screenshots, PDFs, and OG images
  • Track your usage against your plan limits
  • Send you important account updates (like usage warnings or service changes)
  • Respond to support requests
  • Detect and prevent abuse or security threats
  • Improve our service by analyzing aggregate usage patterns (we never look at individual request content)

We do not sell your data. We do not use your data to train AI models. We do not share your data with third parties except as described in the "Third-Party Services" section below.

Data Storage & Security

We take security seriously:

  • All data is encrypted in transit using TLS/SSL
  • Passwords are hashed using industry-standard algorithms (bcrypt)
  • API keys are stored securely and never exposed in logs or error messages
  • Our infrastructure is hosted on secure cloud providers with regular security audits
  • We follow security best practices and keep our dependencies up to date

While we implement strong security measures, no system is 100% secure. If we discover a security breach that affects your data, we will notify you as soon as possible.

Third-Party Services

We use a few trusted third-party services to operate PageBolt:

  • Stripe: We use Stripe to process payments. When you subscribe to a paid plan, Stripe collects and stores your payment information. Stripe's use of your data is governed by their Privacy Policy. We only receive information about your subscription status and billing address from Stripe.

We do not currently use any third-party analytics or tracking scripts on our website or in our API. We may add analytics in the future, but we will update this policy if we do.

Data Retention

We retain your data for as long as your account is active or as needed to provide our services:

  • Account Information: Retained until you delete your account
  • API Usage Logs: Retained for 90 days for operational and debugging purposes, then automatically deleted
  • Billing Records: Retained as required by law (typically 7 years for tax purposes)

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we're required to retain it by law.

Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct your account information at any time from your dashboard
  • Deletion: Delete your account and all associated data (contact us to do this)
  • Portability: Export your API usage logs in a machine-readable format
  • Objection: Object to certain types of data processing (though this may limit your ability to use our service)

To exercise any of these rights, please contact us at support@pagebolt.dev. We will respond within 30 days.

Cookies & Local Storage

We use minimal client-side storage:

  • Session Tokens: We store JWT (JSON Web Token) authentication tokens in your browser's localStorage. This allows you to stay logged in. The token contains no personal information beyond your user ID.
  • No Cookies: We do not use cookies for tracking or analytics. We do not set any cookies on your browser.
  • No Third-Party Tracking: We do not use Google Analytics, Facebook Pixel, or any other third-party tracking scripts.

You can clear your localStorage at any time, but you will need to log in again.

Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we'll update the "Last updated" date at the top of this page. For significant changes, we'll notify you via email or a notice on our website. Your continued use of PageBolt after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us: