Privacy Policy
Last updated 8 October 2026
Code Maker Inc., 92 Sussex Ave, Toronto, ON M5S 1K2, Canada, runs Pagehaus and is responsible for the personal information described here. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in the European Economic Area and the UK, the GDPR. Questions: support@pagehaus.app.
What we collect, and why
| Information | Why | Legal basis (GDPR) |
|---|---|---|
| Your email address and a hashed password (we never store the password itself) | Your account, sign-in, service and billing emails | Contract |
| The files you upload, your site settings, SFTP logins and SSH public keys | Hosting your sites | Contract |
| Billing details: plan, subscription status and a Stripe customer ID. Card details go straight to Stripe; we never see them. | Taking payment | Contract, legal obligations (tax records) |
| The IP address you sign up from, and IP addresses in server logs | Security, preventing abuse and mass sign-ups | Legitimate interests |
| Traffic totals per site (bytes and number of requests per day; not individual visitors) | Plan limits and usage warnings | Contract |
| Abuse reports, including a reporter's email if they give one | Handling reports | Legitimate interests |
Visitors to sites we host
When someone visits a site on Pagehaus, our servers process their IP address and the page requested, to deliver the page, count traffic and keep the Service secure. We don't use tracking or advertising cookies on hosted sites, and we don't build profiles of visitors. If a site's owner adds their own scripts or analytics, that's covered by the owner's privacy notice.
Messages sent through a site's contact form (and the sender's IP address) are stored for the site's owner and emailed to them. The owner is responsible for that data; we process it only on their behalf, keep it until they delete it or their account, and don't use it for anything else. We refuse forms that try to collect passwords or payment card numbers.
Cookies
The dashboard (pagehaus.app) uses only cookies it needs to work: one that keeps you signed in, and security cookies that protect forms against cross-site request forgery. We don't use analytics, advertising or third-party cookies, so there's nothing to opt in to.
Who else handles data
We share information only with service providers that help us run Pagehaus, under contracts that protect it:
| Provider | What for | Where |
|---|---|---|
| OVHcloud | Servers, storage and backups for the Service and all hosted sites | European Union |
| Mailgun (Sinch) | Sending account, form-notification and billing emails | European Union region |
| Stripe | Payments, invoices and the billing portal | Global, including the US and Canada |
| Google (Web Risk) | Checking the addresses of hosted sites against lists of phishing and malware sites | Global |
| Let's Encrypt | HTTPS certificates. Domain names in certificates are published in public certificate-transparency logs. | United States |
| DNSimple | DNS for pagehaus.app and pagehaus.site (no customer content) | United States |
Where data goes outside your country (for example to the US or Canada), we rely on adequacy decisions (the EU considers Canada adequate) or the European Commission's standard contractual clauses. We may also disclose information if the law requires it, or to protect people from fraud or harm. We don't sell personal information.
How long we keep it
- Account information and site content: while your account is open. When you ask us to delete your account, we delete it from the live system within 30 days.
- Backups: encrypted nightly backups are kept for up to 12 months, then deleted. Deleted data disappears from backups as they expire.
- Files removed by the malware scanner: 30 days.
- Billing records: as long as tax law requires (in Canada, generally six years).
- Server logs: a few weeks.
Security
Data is stored in the EU, transmitted over HTTPS or SFTP, passwords are hashed, backups are encrypted, and access to production systems is limited to the people who run the Service.
Your rights
You can ask to access, correct, download or delete your personal information, object to or restrict how we use it, or withdraw consent where we rely on it. Write to support@pagehaus.app; we answer within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, or, in the EEA or UK, to your local data protection authority.
Children
Pagehaus isn't meant for children under 16, and we don't knowingly collect their information.
Changes
If we change this policy in a significant way, we'll email account holders before the change applies.