PagePal · Privacy & data

Your workspace

Study notes, planner tasks, notebook content, conversations and private profiles are saved separately for each account in this browser. Browser storage is not encrypted. Signing out locks the app but keeps local data. Other people with access to the same browser profile or device storage may be able to recover it.

The iOS and Android test apps also keep account-scoped workspace and recovery copies in a local database. PagePal does not add database encryption. Protection depends on your device security, including its passcode. Signing out keeps those copies on the device; clear them through Privacy & data when needed.

Connected services

Clerk manages sign-in, sessions, account details and profile photos. Supabase stores a workspace copy when you choose a cloud save or explicitly enable automatic workspace sync. Sync can include notes, notebook content, conversations and saved writing or handwriting preferences. Reports you explicitly send are stored in a private support queue.

When you choose Google sign-in, Google shares your account identifier, name, email address and profile photo with Clerk for authentication. PagePal uses these account details for your sign-in, profile and account personalization. Google sign-in asks only for basic identity, email and profile access.

When you enable account-wide AI sharing and choose an AI feature, the relevant question, selected notes, draft, attachments or enabled writing description go to OpenRouter and the selected model provider. Other study sets and private handwriting samples are not included automatically. Provider routing requests endpoints that disallow data collection; review provider retention terms before sharing sensitive material.

Your versioned Terms and Privacy acknowledgement and optional AI-sharing choice are saved with your account. The choice applies across Chat, study AI and Humanizer until you change it in Settings → Privacy & data or the notices change. Turning AI sharing off blocks new requests. Account closure removes these saved choices.

Humanizer sends your draft to Turnitout for rewriting. If you have a writing profile, OpenRouter and its model provider first receive the draft and your approved writing-style summary; Turnitout then receives the revised draft. Without a profile, the draft goes directly to Turnitout. Original writing samples are analyzed on your device and are not sent for these passes. Original and revised drafts are kept in your workspace and included when you choose a cloud backup or sync. Turnitout states that it processes text temporarily without retaining drafts or using them for training; this is the provider’s representation, not an independent audit. Review sensitive material before sharing.

Clerk privacy · Supabase privacy · OpenRouter privacy

Subscriptions and payments

Dodo Payments processes web subscriptions as merchant of record. When you choose checkout, Dodo collects the contact, billing and payment information you enter. PagePal keeps provider customer, checkout and subscription references, plan, payment period and status to deliver access. Card numbers are handled by Dodo and its payment providers, not saved in your PagePal workspace. Your Clerk email or phone is not automatically sent as a new buyer profile.

Monthly and yearly plans renew for the chosen period until cancelled. Manage or cancel through Settings → Plans & usage and the secure customer portal. Billing receipts and payment support are available through Dodo. Dodo retains financial records under its own legal and retention duties. Dodo privacy.

Free trial eligibility

Trials are currently disabled. When offered, a Plus trial lasts 72 hours, requires an eligible verified account, and never charges or renews automatically. We check verified contact and linked sign-in identities to prevent repeat trials. Identity matches use keyed security hashes rather than storing additional copies of your email or phone number in the trial records.

A signed first-party browser cookie and a short-lived network hash help detect repeated trial claims. Shared browsers and networks are supporting signals; sharing a school or household IP alone does not block a trial. No canvas, audio, advertising or cross-site fingerprinting is used. Risk assessments stay private and do not restrict ordinary Freemium access or purchased memberships.

Trial history and risk assessments remain while your account exists and are removed by account-deletion cleanup. Minimal keyed identity matches are used for 365 days after a claim, including after account closure, to prevent repeat trials. Daily cleanup removes expired identity matches, browser and network event hashes older than 30 days, and trial request counters older than one day. The browser cookie expires after 365 days. These security hashes are pseudonymous, not anonymous. Contact support through Settings if an eligibility decision seems wrong.

Export, remove and close an account

Settings → Connections lets you export, load or remove your cloud copy. Loading keeps a local recovery copy. Removing a cloud copy keeps local copies on your devices. Export files contain your private material; store them securely.

Settings → Privacy & data clears this account’s local workspace and recovery copies on the current device. Cloud backups, reports, Clerk profile information and other devices are separate. Remove a cloud backup or save a cleaned workspace after removing private writing or handwriting profiles.

Manage your account through Settings → Account security → Manage account. Closing your Clerk account triggers signed cancellation of PagePal subscriptions and cleanup of its cloud workspace, membership, reports and AI usage records. Delivery is asynchronous and failed deliveries are retried. Use Manage billing to cancel promptly before a renewal. Minimal provider references remain for up to 90 days to prevent late checkout events from restoring a closed account and to cancel delayed subscriptions. This does not erase Dodo’s legally retained financial records. Local copies on your devices remain separate. If you cannot access your account, use the public account-deletion resource above or email PagePal support.

Retention and operational records

After account cleanup completes, a permanent audit keeps only the total number of completed deletions. It contains no names, account IDs, event references or timestamps. Temporary security and payment-event safeguards have the separate retention limits described here; those references are not anonymous.

A daily cleanup removes support reports and webhook receipts older than 90 days, AI usage records older than 35 days, and cloud rate-limit records older than one day. Account-deletion security hashes are retained for up to 90 days to prevent old sessions from recreating data. Runtime operation events exclude notes, prompts, tokens and raw provider errors; hosting providers have their own log retention settings.

Cloud copies stay until you remove or replace them, or verified account cleanup removes them. Local work and recovery copies stay until cleared on that device. AI can make mistakes; reports are reviewed through the private support queue and are not an emergency service.

Contact PagePal

For account, privacy or deletion questions, email pagepalsupport@gmail.com. You can also send a report through Settings → Help & support. Keep passwords, security codes and payment-card details out of support messages.