Privacy notice

Effective October 12, 2026.

Allpage operates allpage.site and the Allpage apps. Contact us at hello@allpage.site about this notice or your information.

Allpage helps businesses run websites, bookings, classes, payments, customer records and messages. This notice covers owners, team members, customers, directory visitors and people using our websites, apps, API and connected AI tools.

Allpage and the business you use

We make decisions about information used for Allpage accounts, our billing, security, directory and product improvement. When we store and use a business's customer records to provide its services, we act for that business under our data processing addendum. That business decides why it collects your information and has its own privacy notice. Contact it about your bookings, purchases or its use of your records.

A customer can have one Allpage sign-in across several businesses. Each business has its own customer record; using the same sign-in does not give one business access to another's customers.

Information we collect

We receive information from you, businesses you deal with, people authorized to act for you, services you connect and your use of Allpage.

• Accounts and security: name, email, phone if provided, business membership and role, password hashes, passkey public credentials, authentication settings, sessions, IP addresses and device or browser information. We use these to sign you in, control access, prevent abuse and investigate problems.
• Business information: your profile, contact details, locations, website content, offerings, prices, photos and uploaded files. We use these to run and publish the services you choose.
• Customer and transaction records: contact details, addresses, birthdays, bookings, attendance, orders, agreements, consent, signed forms, messages, notes, custom fields, gift cards and store credit. Businesses can also keep details of children, pets or adults a customer books for, including names, birthdates, notes and pickup contacts. Client galleries can record viewing, favorites and downloads.
• Payments and team pay: payment references, amounts, tax details, refunds, disputes and billing status. Stripe collects card details; we do not receive full card numbers from its payment forms. For businesses using team pay tools, we calculate statements from sessions, attendance and pay rules. The business pays its team.
• Conversations and support: what you send to our assistants or support, replies, task results, approved memories and requests for features we cannot yet provide.
• Activity: changes made by you, the assistant or connected apps; access to personal information; operation timing, errors, AI usage and costs. We use these to run, secure, troubleshoot and improve Allpage.

A business's directory listing uses its published details. Its street address and precise location stay hidden unless the owner chooses to show them. A listing can show its city and an approximate location. Owners can turn their listing off.

Connected services

Connecting a service lets Allpage use the permissions you approve for that service. For example, we can use calendar events for availability, read a connected Outlook mailbox to organize customer emails, publish business posts, handle messages from Meta services, read Square customer and loyalty records, send shipping details to Shippo, or send accounting journals to QuickBooks or Xero. We store connection identifiers and credentials needed to maintain the connection.

You can disconnect services and connected apps in Allpage. Some providers also require you to remove access in their own settings. Information already sent to a provider remains subject to its terms and retention rules. When you use an outside AI app, that app also handles information under its own privacy policy.

Cookies, website visits and embeds

We use cookies or similar browser storage for sign-in, security, appearance preferences and keeping a conversation open. Website chat uses a random conversation cookie lasting up to 30 days. Session duration depends on the sign-in flow. Blocking essential cookies can prevent sign-in or chat from working.

Business website analytics count pages, referral sources, campaign tags and form steps without analytics cookies. They do not record what you type into a form. A daily visitor hash helps count repeat visits. These records are not used for cross-business advertising profiles.

Businesses may add maps, video, music or other supported embeds. Loading them can send your IP address and browser information to their providers, which may use their own cookies. Interactive website blocks may load libraries from jsDelivr, unpkg or cdnjs. Checkout pages restrict external scripts to Stripe's payment tools.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use targeted advertising cookies. There is therefore no sale or advertising-sharing activity for a Global Privacy Control signal to opt you out of. We do not change essential service processing in response to a browser's Do Not Track setting.

AI and improving Allpage

Our AI providers include Anthropic and Cloudflare Workers AI. We send the conversation and context needed for the task, which may include business information and records the assistant is allowed to read. We disable AI Gateway request logging and caching in our deployment configuration. We keep our own operational records of AI use.

AI conversation capture is on by default. We retain prompts, replies, tool inputs and results, usage and outcomes to evaluate and improve Allpage and train our own AI models. This includes customer conversations with a business's assistant and activity through connected agents that Allpage captures. These records are stored separately from the application database for up to three years. Automated redaction removes recognized card numbers, government identifiers, passwords and credentials before storage; it does not make conversations anonymous or guarantee every sensitive detail is removed.

Owners can turn off Improve Allpage with your AI conversations in Settings, Your assistant. This stops new capture for that business and requests deletion of its captured records. Customer account deletion also requests removal of captured records linked to that customer. Contact us to request access or deletion of conversations, including a conversation without an account; include the business, approximate date and enough detail to locate it, without sending sensitive information again.

Health fields marked as sensitive are excluded from model context and training capture. Free-text conversations can still contain sensitive details someone types. Records from health-related businesses are tagged and excluded from training exports by default. Avoid putting health information, passwords or payment details in chat. Our use of captured conversations for our own product improvement is separate from processing customer records solely on a business's instructions.

Who receives information

We disclose information to the business you choose to deal with, its authorized team, apps you authorize and providers needed to operate the service. Our provider list describes their roles. Providers receive information needed for their work, such as hosting, storage, AI, email, texts, payments or shipping.

We may disclose information to comply with law or valid legal process, investigate abuse, enforce our terms, or protect people's rights and safety. A merger, acquisition or sale of assets may involve transferring information subject to the protections in this notice. We do not give one business another business's customer list.

How long we keep information

Account and business records generally remain while needed to provide the service or while a business keeps them. Closing a business or cancelling a paid plan does not automatically erase its records. After a business closes and its payments wind down, an owner can delete it. Thirty days later its personal information and content are deleted: customer details, messages, files, website content and other records. Ledger, sales and tax records are kept for 7 years, and consent records for 3 years or as long as the sale they were given with, with customers anonymized. Those are then deleted too.

When a business, an owner account, or a business started before sign-in that nobody kept is deleted, we keep a de-identified record of it for audit, security and analytics: ids, kinds, dates, plan, amounts, AI usage and activity logs, with names, email addresses, phone numbers, typed words and message bodies removed. We don't set an end date for this record today. A deleted business's name stays in it for the year its web address is held, so no one else can take that address, then it goes too.

• Raw website analytics are scheduled for deletion after 13 months; daily totals remain.
• Logs of personal-data reads are scheduled for deletion after 24 months.
• Operation timing and completed background jobs are generally kept for 30 days; failed jobs for 90 days.
• The original wording of feature requests the assistant could not fulfill is cleared after 90 days; a summary of the missing capability remains.
• Captured AI conversations are kept for up to three years, subject to earlier deletion requests and the business's opt-out.
• While a business is open, its consent, action, event, financial and security audit histories have no automatic expiry. These can contain personal information. We assess deletion requests against the records needed for legal duties, disputes, security and evidence of consent, and explain exceptions that apply.

Scheduled deletion runs periodically, and monthly partitions can remain until the relevant month is eligible for removal. Backups and provider recovery history can retain earlier copies after live records change. Media backup versions are configured to expire after 30 days; database recovery windows depend on the deployment's backup configuration. Backup copies are restricted to recovery and security purposes.

Your choices and privacy requests

You can ask for access, a copy, correction or deletion of your personal information at hello@allpage.site. You can also ask to withdraw consent, restrict a use or object to processing. Depending on your location and which laws apply, you may have rights to portability, to limit sensitive-data use, and to opt out of sale, targeted advertising or profiling used for decisions with legal or similarly significant effects. Allpage does not use personal information for those advertising purposes or such profiling decisions.

We verify requests using information already associated with your account, such as control of your email. An authorized agent may make a request with evidence of your permission; we may still verify your identity. We will not discriminate against you for exercising your rights. We aim to respond within 45 days, or sooner where law requires. If an extension is allowed and needed, we will explain it. If we refuse a request, we explain why; reply with “Privacy appeal” to request another review. We aim to answer appeals within 45 days. You may also complain to your state attorney general or other privacy regulator.

Customers can delete their Allpage account from their account page after confirming their identity. This ends their sign-in sessions, clears linked contact and profile information and stops messages to the deleted account's contact points. Some transaction, consent and historical records remain as described above. For a complete review of related files, conversations or historical records, contact us. Owners and team members can delete their own account from Your account, unless they are the only owner of an open business, or of a closed business they have not yet asked us to delete. This ends their access to every business, and each business's history then shows them as a former team member. Their name and email are removed, and their licenses checklist and idea research are deleted; a de-identified record of their account and its activity stays, as described above. An owner can delete a closed business from Settings; closing it is a separate, earlier step.

Reply STOP to a business's text to stop texts from that business. Marketing emails include an unsubscribe link. Essential account, security and transaction notices may still be sent where permitted. For a business's records or health intake information, you can contact the business directly or ask us to help route your request. Businesses collecting health information publish a separate consumer health data policy on their site.

Children and sensitive information

Allpage accounts are intended for adults aged 18 or older. We do not invite children to create accounts or submit information directly. Parents or authorized caregivers can provide dependent information to a business for its services. If a child has provided information directly, contact us so we can investigate and address it.

Allpage does not provide a HIPAA business associate agreement. Businesses must not use it to store or process information that requires one. Health intake features do not change that restriction.

Security and location

We use access controls, business-level data isolation, encrypted connections, protected integration credentials and audited support access. No service can guarantee absolute security. Allpage is designed for US businesses. Providers may process information in the United States and other countries; we do not promise that all processing stays in one country. If a legally required international transfer arrangement is needed, it must be put in place before that processing begins.

Changes to this notice

We post the current notice here with its effective date. We will notify account holders by email or in the app at least 30 days before a material change takes effect, unless a legal or security need requires a shorter period. A new notice does not by itself authorize a materially different use of information already collected where consent or another legal step is required.