Last updated: March 2026

1. Who We Are

PullPage ("we", "us", "our") is operated by:

[Your Full Name]
[Street and Number]
[Postal Code, City]
Switzerland

Email: contact@pull.page
Website: https://pull.page

PullPage is a personal project operated by a natural person
based in Switzerland. This Privacy Policy explains what personal
data we collect, how we use it, and what rights you have.

This policy complies with the Swiss Federal Act on Data Protection
(nDSG), the EU General Data Protection Regulation (GDPR) where
applicable, and other relevant data protection laws.

2. Data We Collect

2.1 Account Data (via Clerk)
When you sign up, our authentication provider Clerk (clerk.com)
collects:

• Email address

• Name (if provided)

• Profile data from your login provider (e.g. Google)

Clerk also stores the following in encrypted metadata on our
behalf:

• Your active plan (free, one_time, freelancer, agency)

• Number of exports used per month

• Export history (URL, page count, file size, date)

Clerk Privacy Policy: https://clerk.com/legal/privacy

2.2 Payment Data (via Stripe)
For paid plans, payments are processed by Stripe (stripe.com).
We never store your credit card or bank details. Stripe
receives:

• Email address

• Payment information (credit card, etc.)

• Billing address

Stripe Privacy Policy: https://stripe.com/privacy

2.3 Export Data
When you export a website, we create a ZIP file stored on
Cloudflare R2 (cloudflare.com). These files are automatically
deleted after 30 days. We store the following metadata:

• The exported URL

• Number of pages and assets

• ZIP file size

• Timestamp of the export

2.4 Technical Data (Server Logs)
When you visit our website, the following is automatically
collected:

• IP address (anonymized)

• Date and time of access

• Pages visited

• Browser type and operating system

This data is used for technical operations and troubleshooting
and is not linked to your user account.

3. How We Use Your Data

We process your data exclusively for the following purposes:

• Providing and operating the PullPage service

• User authentication and account management

• Processing payments and subscriptions

• Enforcing usage limits (export quotas)

• Technical troubleshooting and security

• Communication regarding your account

We do not sell, rent, or share your personal data with third
parties for marketing purposes.

4. Legal Basis

Switzerland (nDSG): Processing is based on contract performance
(Art. 31 para. 2 lit. a nDSG) and legitimate interests
(Art. 31 para. 1 nDSG).

EU (GDPR): Contract performance (Art. 6(1)(b) GDPR), legitimate
interests (Art. 6(1)(f) GDPR), and your consent where given
(Art. 6(1)(a) GDPR).

5. Third-Party Services

We use the following third-party services that may process
your data:

Clerk (clerk.com) — Authentication — USA
Stripe (stripe.com) — Payment processing — USA
Cloudflare R2 (cloudflare.com) — File storage — Global/EU
Vercel (vercel.com) — Frontend hosting — USA/Global
Railway (railway.app) — Backend hosting — USA

Data transfers to the USA are governed by Standard Contractual
Clauses (SCCs) as required by the GDPR, and adequacy decisions
where available.

6. Cookies

We only use strictly necessary cookies:

• Clerk session cookie (authentication and session management)

• Stripe cookies (only during the checkout process)

We do not use tracking, analytics, or advertising cookies.

7. Data Retention and Deletion

• Account data: Stored as long as your account exists.

• Export files (ZIP): Automatically deleted after 30 days.

• Export history (metadata): Automatically deleted after 30 days.

• Payment data: Retained by Stripe according to their retention
  policies and legal requirements (up to 10 years for accounting
  records).

• Server logs: Deleted after a maximum of 90 days.

When you delete your account, all personal data is removed
unless legal retention obligations apply.

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request information about the data we store about you.

• Rectification: Request correction of inaccurate data.

• Deletion: Request deletion of your data, subject to legal
  retention obligations.

• Data portability: Request your data in a commonly used format.

• Objection: Object to the processing of your data.

• Complaint: File a complaint with the Swiss Federal Data
  Protection and Information Commissioner (FDPIC) or a
  competent EU supervisory authority.

To exercise your rights, contact us at: contact@pageunlock.com

9. Data Security

We take appropriate technical and organizational measures to
protect your data:

• Encrypted transmission (TLS/HTTPS)

• Authentication via Clerk with current security standards

• No local storage of payment data

• Automatic deletion of export files after 30 days

• Access restrictions at server level

10. Children's Privacy

PagePull is not intended for use by children under the age
of 16. We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data,
please contact us at contact@page.pull.

11. Changes to This Policy

We may update this Privacy Policy at any time. The current
version is always available on this page. For material changes,
we will notify registered users by email.

12. Contact

For questions about this Privacy Policy:
contact@page.pull