Privacy policy

Last updated October 25, 2026

This policy explains what app.page collects when you use the website at app.page and the product at dashboard.app.page, why, and the choices you have. app.page is run from Norway. Questions go to support@app.page.

What this policy covers

It covers your app.page account and everything you do in the Dashboard, the Editor, and Agent. Each Site published on app.page belongs to the developer who made it; their own privacy policy explains what their app does with your data.

What we collect

  • Account. Your name, email address, and profile picture, and the name and address of your Organization.
  • Your content. Projects, Pages, the files you upload to Assets, the Brief, the store and website links you give us and the public listing details we fetch from them, and your conversations with Agent.
  • Billing. Your Plan, your AI usage, and your purchase history. Card details go straight to Stripe; we never see them.
  • Abuse reports. The address, reason, and details you send, and your email if you give it.
  • Technical logs. Our hosting keeps short-lived request logs (IP address, browser, time, and page) to run the service and stop abuse. Visits to published Sites are logged the same way.
  • Usage and errors. Which pages of app.page and dashboard.app.page you view, a few named actions (such as creating a Project or publishing a Page), and the errors you run into. See Analytics and error tracking.

Why we use it

  • To provide the service you signed up for: your account, your Sites, Agent, and billing (performance of our contract with you).
  • To keep app.page secure and to investigate abuse reports (our legitimate interest in a safe service).
  • To keep accounting and tax records (a legal obligation).
  • To see how app.page is used and fix what breaks (our legitimate interest in improving the service).

We do not sell your data, show ads, or use your content to train AI models.

Who we share it with

We use these providers to run app.page. Each processes data only to provide its part of the service.

  • Clerk — sign-in and accounts.
  • Convex — the database behind the Dashboard, the Editor, and Sites.
  • Cloudflare — storage for the files you upload to Assets.
  • Vercel — hosting, and the AI Gateway that routes Agent requests.
  • AI model providers (such as Anthropic, OpenAI, and Google) — when you use Agent, your messages and the Project content Agent needs are sent to the model that answers.
  • Stripe — payments. Stripe sells the subscription and Top-ups to you as merchant of record, so it also handles your payment and tax details under its own privacy policy.
  • PostHog (EU cloud) — analytics and error tracking.

Some of these providers process data outside the EEA, including in the United States. Those transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Analytics and error tracking

We use PostHog, in its EU cloud, to count visits, see which features are used, and find errors. It runs on app.page and dashboard.app.page only. Published Sites never load it.

  • What it records. The pages you view, with your browser and device type; named actions such as signing up, creating a Project, publishing a Page, an Agent reply finishing (its size, not its content), and upgrading or buying a Top-up; and errors, with where in app.page they happened.
  • How it knows you. When you are signed in, by your account id and your Organization's id. Never by your name or email address. When you are signed out, not at all: PostHog counts visitors with a one-way hash of your IP address and browser that changes every day. It does not keep your IP address or record your location.
  • Cookieless. PostHog stores nothing in your browser: no cookies and no local storage.
  • How long. PostHog keeps these events for up to seven years. Deleting your account deletes the events tied to your account id too, within a week.

Cookies

app.page and dashboard.app.page set only the cookies that keep you signed in. Analytics are cookieless, and there are no advertising or tracking cookies, so there is no cookie banner. Published Sites set no cookies.

How long we keep it

We keep your account and content while your account exists. When you delete a Project or ask us to delete your account, we delete that data, apart from billing records we must keep under accounting law and backups that expire on their own. Technical logs expire after a short period.

Your rights

You can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how we use it. Email support@app.page and we will reply within a month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live.

Children

app.page is a tool for app developers and is not meant for anyone under 16.

Changes

When we change this policy we update the date above, and we email you about significant changes.

See also the Terms of Service.