Privacy Policy
Last updated: December 26, 2025
This Privacy Policy describes how PageGrab ("we", "us", or "our") collects, uses, and protects your information when you use our screenshot API service ("Service").
1. Information We Collect
Account Information
When you sign up for our Service, we collect:
- Email address (via Stripe or RapidAPI)
- Payment information (processed securely by Stripe)
- Account identifiers and API keys
Usage Data
When you use our API, we automatically collect:
- URLs submitted for screenshot capture
- API request timestamps and response times
- Request parameters (format, dimensions, options)
- Usage counts for billing purposes
Technical Data
We may collect:
- IP addresses
- API client information (user agent)
- Error logs and diagnostic data
2. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Process payments and manage subscriptions
- Enforce usage limits and prevent abuse
- Send important service notifications
- Improve and optimize the Service
- Respond to support requests
- Comply with legal obligations
3. Data Storage and Retention
Screenshots and PDFs
Generated files are stored temporarily on Cloudflare R2:
- Free plan: 7 days
- Starter/Pro plans: 30 days
- Business plan: 90 days
After this period, files are automatically and permanently deleted.
Account Data
Account information is retained while your account is active. Upon account deletion or subscription cancellation, we retain minimal data as required for legal and business purposes (e.g., payment records for tax compliance).
Usage Logs
API usage logs are retained for up to 90 days for analytics and abuse prevention.
4. Data Sharing
We do not sell your personal information. We may share data with:
Service Providers
- Stripe - Payment processing
- Cloudflare - Hosting, CDN, and storage
- RapidAPI - API marketplace (if you signed up via RapidAPI)
Legal Requirements
We may disclose information if required by law or to protect our rights, safety, or property.
5. Data Security
We implement industry-standard security measures:
- All data transmitted via HTTPS/TLS encryption
- API keys are hashed and stored securely
- Access controls and authentication for all systems
- Regular security reviews and updates
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have rights to:
- Access - Request a copy of your personal data
- Correction - Request correction of inaccurate data
- Deletion - Request deletion of your data
- Portability - Receive your data in a portable format
- Objection - Object to certain processing activities
To exercise these rights, contact us through our support channels.
7. Cookies and Tracking
Our API service does not use cookies. Our website may use minimal cookies for:
- Essential functionality
- Analytics (anonymized)
You can configure your browser to reject cookies, though this may affect website functionality.
8. International Data Transfers
Our Service uses Cloudflare's global network. Your data may be processed in various locations worldwide. We ensure appropriate safeguards are in place for international transfers.
9. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on our website
- Updating the "Last updated" date
- Sending email notification for significant changes (if we have your email)
11. Contact Us
For privacy-related questions or to exercise your rights, contact us through:
- Our website contact form
- RapidAPI support channels (for RapidAPI users)