Pageify · Early access

Your privacy

Last updated 5 October 2026

Pageify helps you create a small business page from your social profile. MAKE MY AI LTD is responsible for the personal information described in this notice. Contact us at hello@pageify.ai.

Information we use

When you request an import, we use the profile you identify: its username, name, biography, profile image, available business links and a limited selection of recent public post captions. If you start with Instagram and choose Photo focus, or later choose “Use my Instagram photos”, we also retrieve up to eight recent public photographs for a one-time import. If your profile or captions contain a supported Linktree address, we also retrieve the public button titles and destinations on that page to prepare your links. We use this information to draft your page and suggest services. We also store the text, images, links and prices you add or edit, your saved page, publishing status and information provided to resolve support requests.

We use a protected browser cookie and a private edit link to recognise the person managing a draft. Our service providers process connection and security information, including IP addresses and request logs. Pageify uses a hashed IP identifier, request counts and provider usage totals to limit abuse and control import costs.

If you choose to receive Pageify tips and reminders, we record your choice after you verify your email. We send a short getting-started sequence based on your saved page, checkout, purchase and publishing progress, with no more than one promotional email per day. You can unsubscribe without signing in using the link in any promotional email, or change your preference from My pages. Signing in, buying a page or sending an enquiry does not automatically subscribe you. Essential account messages are separate, including a confirmation with a return link when you save a page.

Resend delivers these emails. We keep consent and unsubscribe records, the sequence steps sent and delivery outcomes, and use bounce or complaint reports to stop further sends. Email payloads are cleared from our delivery queue after 30 days; limited delivery and consent records remain while your account exists so we can honour your choice and avoid duplicate messages. We do not add open-tracking pixels or tracked redirects to these emails. Account deletion removes the linked email preferences and queue records.

Where email sign-in is available, we store your email address, account identifier and links to the pages you choose to save to your account. We use email verification codes and protected sign-in cookies to authenticate you. Your account email is not automatically added to your public page. Sign-in request counts and a hashed email identifier help limit misuse of verification emails.

Enquiries and booking

If you send an enquiry from a business page, we store your name, email, selected service, message and any optional answers you choose to give. The page owner chooses the questions. Please provide only what is needed for your enquiry and avoid medical, financial or other sensitive details. We store the enquiry in a private inbox accessible to the signed-in page owner and send a notification containing it to their verified account email through Resend. A private page-edit link alone does not grant access to the inbox. We use this information to pass on your requested enquiry, not to subscribe you to marketing.

Enquiries and their notification payloads are removed from our active database after 90 days by a scheduled cleanup. Processing is batched, so removal may take longer during interruptions; database backups follow the provider’s backup lifecycle. Copies already delivered to the business’s mailbox are controlled by that business. Contact the business about its use of your enquiry or contact hello@pageify.ai for help with data stored by Pageify. Hashed IP identifiers, short-lived form tokens and request counts help prevent spam. Enquiry content is not sent to our AI provider or advertising platforms.

Where a page offers in-page booking through Calendly, Booksy, Vagaro, Acuity, Setmore, Timely or Treatwell, the provider loads only when you choose that booking option. The editor also offers an explicit widget test. The provider receives your connection information and any booking details you enter in its widget. Pageify does not store those booking answers or connect to your calendar account. The page owner manages availability and bookings with their provider. The provider’s privacy notice and cookie choices apply, and its widget may use its own analytics. You can instead follow the direct booking link to continue on the provider’s site.

Payments

Stripe processes purchases. We send your account email and identifiers for your account, page and order so a payment can be linked to the right page. We store payment references, payment status and relevant confirmation, refund and dispute events. We do not receive or store your full payment-card number. Stripe processes payment and fraud-prevention information under its own privacy notice.

We use payment records to fulfil your purchase, provide support, prevent duplicate charges and meet accounting and legal obligations. Required transaction records may need to be retained after a page or account is removed.

Social connections and AI

Instagram imports currently use ScrapeCreators to retrieve public profile information. We also use ScrapeCreators to read supported public Linktree pages linked from the imported profile or captions. Linktree button titles and destinations are processed as links, rather than sent to Anthropic for service or price extraction. Imported links need your review before publication. We send relevant profile text and captions to Anthropic’s API to suggest page wording and services. For Photo focus imports, we also send resized copies of the selected public photographs with their captions and your service or link labels to Anthropic to suggest a cover, photo placements and image descriptions. Imported photos are saved to your private editor library. Only photos you place on the page become public when you publish; unused library photos stay private. We do not keep syncing your Instagram account. Suggestions may be wrong. You can replace or remove photos, edit the wording and edit or remove services before publishing.

For a one-time TikTok import, ScrapeCreators reads the public profile you enter, including its name, bio, supported avatar, bio link and up to 12 recent video descriptions. Anthropic uses that text to draft your editable introduction and services. No TikTok login is required, and this import does not verify ownership of the TikTok account. We do not import private profiles, download or transcribe videos, read messages or followers, post content or keep your page in sync. Profile identifiers and description batches are processed in memory; short supporting excerpts may remain with suggested services in your private draft. Your chosen profile photo and editable page are saved. You can upload additional photos yourself.

Our separate, private TikTok developer sandbox uses owner-authorised connections. It retains a hashed app-specific account identifier, requests token revocation after importing and does not retain access or refresh tokens. Its test drafts cannot be published. Deleting a connection does not delete a saved draft; use our data-deletion process to request removal.

Why we process it

We process the information needed to create, save and host your requested page to provide our service to you. We rely on our legitimate interests in securing Pageify, preventing misuse, resolving support requests and operating the service for associated security and administrative information. We use consent where we ask you to authorise an optional social connection or another optional use. You can withdraw that consent; withdrawal does not undo processing that was lawful before it.

Public availability does not remove someone’s privacy rights. If a requested profile includes another person’s information, we limit its use to evaluating and preparing the requested business page, with publication requiring a signed-in account and permission to use the content. We may ask for ownership evidence if there is a dispute or suspected misuse. Contact us if information about you has been imported in error, or use our reporting page for impersonation or misuse.

Who receives information

We use Vercel to host Pageify, Supabase for our database and image storage, ScrapeCreators for public Instagram, TikTok and Linktree lookups, and Anthropic for AI text generation and photo matching. They receive the information needed for their part of the service. The social platform also receives connection requests you authorise. Support correspondence is handled through Google Workspace.

We send internal administrative notifications through Resend when someone submits a profile or email, signs in, provides ownership evidence to support, saves or publishes a page, starts checkout, or has a confirmed payment, refund or dispute. These may include the submitted handle, account email and page or payment references. They go to our operator for running and supporting Pageify, and do not subscribe you to marketing emails. Notification payloads in our application queue are cleared after 30 days; delivered emails and provider records follow their separate retention arrangements.

When email sign-in is enabled, Supabase Authentication manages accounts and sign-in sessions, and Resend delivers the requested verification emails. Your saved drafts are accessible to your signed-in account as well as through any existing private edit link. Account records remain until removed through our data-deletion process; signing out does not delete them.

Your published page is available to visitors on the internet. Drafts are accessible through their private edit access. Keep that access private: anyone who has your private edit link can manage the draft. We may also disclose information where required by law or to address fraud, security threats or legal claims.

Where information is processed

Pageify’s main database is hosted in London. Our providers may also process information outside the UK, including in the United States, for hosting, AI generation, public profile lookups and support. Choosing a London database does not mean that all information stays in the UK.

Vercel, Supabase, Anthropic and Google publish data-processing terms that describe their international-transfer protections, including standard contractual clauses and provisions for UK transfers where applicable. You can read the terms for Vercel, Supabase, Anthropic and Google Workspace, or ask us for information about the safeguards relevant to your data. ScrapeCreators is operated by a US business; its privacy policy describes its processing of profile lookups and usage records.

How long information remains

Previews that have never been saved to an account or published may be automatically removed after 30 days without an edit. Pages saved to an account, pages with a publication claim and pages linked to any payment record are excluded from this automatic preview cleanup. Saving to My pages keeps a preview available. Unpublishing removes the public page but keeps its private draft.

A daily cleanup removes expired import-cache records and expired temporary social-connection state. The import cache is reusable for 24 hours. Images are removed only when they are no longer referenced by any draft, published page or import-cache record and have passed an additional seven-day grace period. Cleanup is processed in batches, so removal can take longer during a backlog or interruption.

Saved account and page data, payment records and security counters are not removed by the automatic preview cleanup. We review retention and deletion requests separately, considering what is still needed to provide your page, resolve a support matter, investigate misuse, meet a legal requirement or address a legal claim.

Providers keep some records separately. Anthropic describes a standard API input and output retention period of up to 30 days, with exceptions for particular services, agreements, safety and legal requirements; see its retention policy. ScrapeCreators may retain API responses and says usage logs may be retained indefinitely. Hosting logs, support correspondence and backup copies follow the relevant provider’s retention arrangements. Deleting a Pageify page does not instantly erase all provider records or backup copies. We will explain applicable limits when handling a deletion request.

Your choices and rights

You can edit your page and unpublish it in the editor. To request access, correction, deletion, restriction, portability or to object to a use of your information, email hello@pageify.ai. Rights depend on the circumstances and the reason for processing. We may need to confirm your identity before acting.

See how to request deletion. You can also complain to the UK Information Commissioner’s Office, or the relevant data protection authority where you live. Pageify’s page-generation suggestions do not make decisions about eligibility for employment, credit or similar services.

Optional advertising measurement

If you choose “Accept optional”, Pageify uses Meta Pixel and Meta Conversions API to measure and improve our Facebook and Instagram advertising. We share visits to our marketing pages and actions such as requesting a preview, submitting an email, completing a new account registration, starting checkout, purchasing and publishing. Purchase events include the amount, purchase currency and Pageify plan purchased. These events do not include your email address, social handle, imported profile text, private edit link or your page’s services.

Meta receives your IP address, browser information and advertising identifiers, including a Meta ad-click identifier when available. Meta may link these events with your Meta account and use them for advertising measurement, delivery and personalisation under its privacy policy. Meta processes information internationally, including in the United States; its data-processing terms explain applicable transfer safeguards.

Optional measurement is off until you consent. Rejecting it does not prevent you from creating or purchasing a page. Use “Privacy choices” on Pageify to withdraw consent in this browser at any time. Withdrawal stops future measurement and cancels unsent events linked to this browser’s choice; it cannot recall events already sent or a transmission already in progress. For deletion requests, contact hello@pageify.ai. These tracking tools are not installed on customers’ published Pageify pages.

Your preference lasts up to 180 days. Optional _fbp and _fbc advertising cookies last up to 90 days and can be renewed by Meta while consent remains active. We keep a record of consent for up to 181 days. Temporary information linking consent to a preview or checkout is deleted within 30 days. Event delivery data is cleared after delivery, withdrawal or a retry limit of 23 hours; limited event references remain until the consent record expires, to avoid counting events twice. Scheduled cleanup and backups may take longer. Meta retains information under its own policy.

Cookies and changes

Pageify uses essential cookies to protect private editing and account sign-in sessions and remember your privacy choices. We also remember your selected pricing currency for up to 180 days. If you have not chosen one, we use the country supplied by our hosting provider to suggest a currency. Advertising cookies are optional, as explained above. This notice will be updated as Pageify’s features and data practices change.