1. Scope
This Privacy Policy applies to PagePith’s website, dashboard, scraping API, monitoring tools, hosted MCP server, and related services (the “Services”). It does not govern a third-party website merely because you ask PagePith to retrieve that website.
DiCarlo Software Solutions LLC, operator of PagePith, is responsible for the personal information described in this policy. If you use the Services for an organization, that organization may separately control information it submits to us. For that customer-submitted information, PagePith generally acts as a processor or service provider under our Data Processing Addendum.
2. Information we collect
Information you provide
- Account information: name, email address, password credentials, and profile details received when you sign in with Google or GitHub.
- Billing information: subscription, plan, usage, transaction, and customer identifiers. Payment-card details are collected and processed by Stripe; PagePith does not receive your full card number.
- Service configuration: API-key names and metadata, URLs you submit, monitor names and schedules, callback and webhook URLs, notification email addresses, and webhook signing information.
- Communications: information you include when you contact us for support, privacy requests, or other inquiries.
Content processed through the Services
When you request a scrape, we process the submitted URL and the content returned by the target website, including page titles, HTML, Markdown, metadata, and retrieval details. Successful scrape results are cached for seven days by default unless you bypass or invalidate the cache. Monitoring stores page snapshots, change summaries, check history, and delivery status; historical monitoring records are generally pruned after 30 days, while the current baseline is retained while the monitor exists.
Target pages may contain personal information about third parties. You are responsible for ensuring that you have a lawful basis to submit those URLs and use the returned content. Please do not use PagePith to process sensitive or regulated personal information.
Information collected automatically
- Device and network data: IP address, browser and device details, timestamps, referring pages, and similar technical information.
- Usage and diagnostic data: pages viewed, buttons clicked, API routes, response status, request duration, retrieval tier, cache status, usage source, and API-key metadata.
- Cookies and local storage: session information, authentication state, product analytics identifiers, signup method, and blog attribution data.
3. How we use information
We use information to:
- provide, cache, monitor, maintain, and troubleshoot the Services;
- authenticate users, issue API keys, secure accounts, and prevent abuse;
- measure usage, apply credits and rate limits, process billing, and administer subscriptions;
- send requested service messages, monitoring alerts, and webhook callbacks;
- understand product use and improve features, reliability, and documentation;
- respond to support and privacy inquiries; and
- comply with law, enforce our Terms of Service, and protect users, PagePith, and others.
Where data-protection law requires a legal basis, we process information as needed to perform our contract with you, comply with legal obligations, pursue legitimate interests such as securing and improving the Services, or based on consent where we specifically request it.
4. How we disclose information
We may disclose information to the following categories of recipients:
- Infrastructure providers that host the application, databases, queues, cache, logs, and network services.
- Product providers, including Stripe for billing, PostHog for analytics, Sentry for error monitoring, and Resend for email delivery.
- Authentication providers, such as Google or GitHub, when you choose social sign-in.
- Destinations you direct, including callback URLs, monitoring webhooks, and notification addresses.
- Professional advisers and authorities when reasonably necessary to comply with law, protect rights and safety, or establish and defend legal claims.
- Transaction participants in connection with financing, due diligence, a merger, acquisition, reorganization, or sale of assets.
We do not sell personal information or share it for cross-context behavioral advertising. We do not use submitted page content to advertise to you.
Our production service providers, purposes, and primary processing locations are listed on the Subprocessor List.
5. Cookies and analytics
PagePith uses essential cookies and similar browser storage for authentication, security, and privacy preferences. Optional PostHog analytics and attribution storage remain off unless you accept analytics. If accepted, PostHog helps us understand visits and product events. You can reject or later withdraw analytics consent without losing access to the Services.
PagePith does not currently respond to the older “Do Not Track” signal. We honor legally applicable browser-based opt-out signals for sale or sharing; PagePith does not sell or share personal information for cross-context behavioral advertising. You can use at any time.
6. Retention
We retain account and billing records while your account is active and afterward as needed for legitimate business, tax, accounting, dispute-resolution, security, and legal purposes. Successful scrape results are cached for seven days by default. Monitoring history is generally kept for 30 days, and deleting a monitor deletes its associated channels, snapshots, checks, events, and delivery records from active systems.
Logs, backups, analytics records, and records needed to prevent fraud or comply with law may follow different retention schedules. We delete or de-identify information when it is no longer reasonably needed for the purposes described here.
7. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. For example, webhook signing secrets are encrypted in storage and API keys are intended to be treated as credentials. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
Keep your credentials confidential and contact support@pagepith.com if you believe your account or API key has been compromised.
8. International data transfers
PagePith and its providers may process information in the United States and other countries whose privacy laws may differ from those where you live. Where required, we use recognized safeguards for international transfers, including the European Commission’s Standard Contractual Clauses as described in our DPA.
9. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; object to or restrict certain processing; withdraw consent; or appeal a decision about a request. You may also have the right to complain to your local data-protection authority. We will not discriminate against you for exercising an applicable privacy right.
To make a request, email support@pagepith.com. Tell us what you are requesting and the email address associated with your account. We may need to verify your identity or authority before acting. Authorized agents may submit a request where permitted by law, subject to appropriate verification. We aim to respond within one month under the GDPR or 45 days under the CCPA, subject to lawful extensions.
10. California privacy notice
During the preceding 12 months, PagePith may have collected the following CCPA categories: identifiers; customer records and commercial information; internet or electronic-network activity; approximate geolocation derived from IP address; and professional information a user provides. Sources include you, your organization, your device, social-login providers, target websites you select, and service providers. We use and disclose these categories for the business purposes in Sections 3 and 4.
PagePith does not sell personal information, share it for cross-context behavioral advertising, or use or disclose sensitive personal information for purposes requiring a right to limit under the CCPA. California residents may request access, correction, deletion, or portability and may exercise applicable opt-out rights without discrimination by using the contact method in Section 9.
11. Children
The Services are intended for business and developer use and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can take appropriate action.
12. Changes to this policy
We may update this Privacy Policy as our practices or legal obligations change. We will post the revised policy here and update the date above. If a change is material, we will provide additional notice where required.
13. Contact us
For questions or requests concerning this policy or PagePith’s privacy practices, contact support@pagepith.com.
DiCarlo Software Solutions LLC
425 W Colonial Dr Ste 101 Orlando, FL 32801