Privacy Policy

• Account: email address, password (stored hashed, never recoverable), username. If you sign in with Google: your Google account email, name, and profile photo.
• Content: the HTML pages and PDF documents you upload, their titles, sharing settings, and any labels you type for recipient links (for example a recipient company name).
• Subscription: plan status and period, plus customer and subscription identifiers from our payment provider. Payments are handled by Polar as merchant of record; we never receive or store card numbers.
• Viewers of shared links (including non-members): a salted, irreversible hash of the IP address (the raw IP is not stored), browser and device type, referrer, approximate country and city derived from the IP, time of access, and per-page reading time for PDFs. This is shown to the member who shared the page as analytics.
• Automatically collected: cookies for staying signed in and for keeping password-protected documents unlocked, and usage events (pages visited, clicks) with device and browser information. We do not run session recording on shared pages.
• Connected apps: the name and authorization record of any app (such as an AI assistant) you allow to connect to your account.
• Support: the content of your message and your reply email address.

• Identifying you, signing you up and in, and managing your account
• Storing and sharing your pages and documents, per-recipient links, and view analytics
• Billing, renewing, and refunding Pro and Team subscriptions
• Preventing abuse (credential stuffing, excessive requests, phishing or other content that breaks our Terms) and keeping the Service secure
• Measuring usage, improving the product, and answering support requests

We delete personal data without delay when you close your account or when the purpose is fulfilled. Pages and documents you delete, and their view records, are deleted with them. Records that Korean law requires us to keep are retained for the periods below, then deleted.

• Contract and withdrawal records: 5 years (Act on Consumer Protection in Electronic Commerce)
• Payment and supply records: 5 years (same Act)
• Consumer complaint and dispute records: 3 years (same Act)
• Service access logs: 3 months (Protection of Communications Secrets Act)

We do not sell or share your personal data with third parties, except with your consent or where the law requires it. Shared-link viewer data (section 1) is shown to the member who shared the page as a feature of the Service.

We rely on the providers below to run the Service. Some of them process data outside your country. Data is transmitted over the network as you use the Service, and each provider retains it until our contract ends or your account is closed (including the statutory periods in section 3). If you do not want your data transferred this way, you can choose not to use the Service.

When data is no longer needed we delete it without delay. Electronic files are erased so they cannot be recovered. Records kept under a legal obligation are stored separately from other data and deleted when the retention period ends.

You can ask at any time to access, correct, or delete your personal data, to restrict its processing, or to close your account. You can change your username and password in Settings. For anything else, email [email protected] and we will act without undue delay. A legal representative or an authorized agent may make the request on your behalf.

We use cookies and browser storage to keep you signed in, to keep password-protected documents unlocked, and to measure usage. You can block cookies in your browser settings, but sign-in and some other features will stop working.

• All traffic encrypted in transit (HTTPS)
• Account passwords and shared-page passwords stored as one-way hashes
• Viewer IP addresses never stored in raw form (irreversibly hashed)
• Row-level access control in the database and least-privilege admin access
• Staff open a page's content only to review a report of abuse or to answer your support request, and every such access is logged
• Uploaded pages rendered in an environment isolated from the app itself

We do not accept sign-ups from children under 14.

• Data protection officer: 이광호 (CEO)
• Email: [email protected]

This policy applies from November 1, 2026. We announce changes in the Service at least 7 days before they take effect, and at least 30 days before for changes that materially affect your rights.