Admin console
One link.
Every platform.
Build, publish and track your bio page in one place — fast, clean, in your own style.
Privacy Policy
1. Data controller
| Controller | [Provider company name] |
|---|---|
| Registered office | [Address] |
| [privacy contact e-mail] |
This policy explains, in line with Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011, which personal data we process when you use the Pagizz service (the Service), for what purpose and for how long.
2. Data of registered users
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, e-mail address, password (hashed), interface language | Creating the account, login, providing the Service | Performance of contract (GDPR Art. 6(1)(b)) | Until the account is closed, then up to 30 days |
| Google account identifier (with Google sign-in) | Signing in with Google | Performance of contract | Until the account is closed |
| E-mailed login and sign-up codes, password recovery token | Account security, two-step verification | Performance of contract, legitimate interest (account security) | Up to 24 hours after expiry |
| Time and version of accepting the Terms | Evidence of the contract | Legal obligation, legitimate interest | 5 years after the account is closed (limitation period) |
| Billing details (name/company, address, tax number), payment events, invoices | Invoicing, accounting | Legal obligation (Accounting Act) | 8 years from issuing the invoice |
| Support ticket contents and attachments | Customer support, complaint handling | Performance of contract, legal obligation | 3 years after the ticket is closed |
| Login time, log of actions performed in the account | Account security, investigating abuse, version history | Legitimate interest | Up to 1 year |
| Newsletter setting | Sending tips and news (opt out in your profile any time) | Consent | Until withdrawn |
| Ratings, feedback | Improving the Service | Legitimate interest | Up to 3 years |
Payments are processed by Stripe Payments Europe Ltd. (Ireland); card data is handled exclusively by Stripe and the Provider has no access to it. Stripe's privacy policy: stripe.com/privacy.
3. Data of visitors of published pages
When a page published by a User is visited, the Provider compiles server-side visitor statistics shown to the page owner in aggregated form (page views, referrer, device type). For this we record the visitor's IP address [currently in full / anonymised - to be decided before go-live, see README], browser type and time of visit, on the basis of legitimate interest (operating the service, filtering abuse), for up to 12 months.
The page owner may also place their own tracking codes (e.g. Google Analytics, Meta pixel) on the page; the owner is responsible for that processing, and such codes do not run until the visitor accepts the cookie consent bar. For data collected by the page owner (e.g. coupon redemption) the owner is the controller and the Provider is the processor.
4. Cookies
- Session cookie (admin console): keeps you logged in. Strictly necessary, until the browser is closed.
- cc_consent (published pages, if the owner enabled the consent bar): stores the visitor's cookie decision, 365 days.
- Password-protected page cookie: remembers a correctly entered page password. Strictly necessary.
5. Processors, transfers
| Recipient | Activity | Location of data |
|---|---|---|
| [Aruba Cloud S.p.A.] | Hosting, server operation, backups | EU |
| Stripe Payments Europe Ltd. | Card payments, subscription management | EU (Stripe may transfer certain data to the USA under the EU-US Data Privacy Framework) |
| Google Ireland Ltd. | Google sign-in (OAuth), reCAPTCHA bot protection | EU / USA |
| [Mailgun Technologies / e-mail delivery provider] | Sending transactional and newsletter e-mails | EU |
| [Cloudflare, Inc.] | DNS, network protection | EU / USA |
| [Accountant] | Bookkeeping of invoices | Hungary |
The Provider discloses personal data to authorities only where required by law.
6. Data security
Passwords are stored as irreversible hashes, login is confirmed with an e-mailed code, and the connection is encrypted (HTTPS). Attachments and invoices are stored in a directory not directly reachable from the web. Daily backups are made and also kept at a location independent of the hosting provider.
7. Your rights
You have the right to access your personal data, to request rectification, erasure or restriction of processing, to data portability, and to object to processing based on legitimate interest. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You can change your profile and newsletter setting yourself in the admin console; for other requests contact us at the e-mail address above or under Support, and we will respond within 30 days.
You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11.; naih.hu; [email protected]) or bring the matter before a court.
8. Changes to this policy
The Provider may amend this policy; the amended version is published with a new version number and Users are asked to accept it on their next login. Earlier versions remain available on the /legal page.