Legal
Privacy policy
Who is responsible / Contact
The controller of your data is Pagemint, Austria.
Privacy contact: pagemintapp@gmail.com. You can send data requests for access, correction, deletion or export to this email address.
What we collect and why
- Account data (email address, password hash, display name) — to run your account. Legal basis: contract, Art. 6(1)(b) GDPR.
- Content you create (niches you search, ideas, guides, generated images) — to save your work and generate your guides. Legal basis: contract, Art. 6(1)(b) GDPR.
- Credit and purchase records (plan, amount, date, credit history) — to manage your credits and meet accounting duties. Card details are handled only by Paddle and are never stored by us. Legal basis: contract, Art. 6(1)(b), and legal obligations, Art. 6(1)(c) GDPR.
- Technical logs and security data (IP address, device and browser, error logs) — to keep the service secure. Legal basis: legitimate interest in security, Art. 6(1)(f) GDPR.
- Support emails — to answer your requests. Legal basis: contract / legitimate interest, Art. 6(1)(b) and (f) GDPR.
Who receives your data
- Lovable — hosting, database, authentication and file storage.
- AI model providers via Lovable AI — they generate text and images from your inputs. Your data is not used to show you ads.
- Paddle.com — our reseller and Merchant of Record, for payments, invoices, tax and fraud prevention. Paddle is an independent controller for payment data; see Paddle's privacy policy.
- Professional advisers (for example a tax accountant) where needed.
- Authorities where legally required.
We never sell your data.
International transfers
Some providers process data outside the EEA. Where this happens we rely on EU adequacy decisions or Standard Contractual Clauses.
How long we keep it
- Account and content: until you delete your account (deleted within 30 days, backups within 90 days).
- Purchase and invoice records: 7 years, as required by Austrian tax law (§ 132 BAO).
- Technical logs: up to 30 days.
You can delete your account and all your data at any time from the account menu.
Security
We use encryption in transit (HTTPS), access controls and row-level security so only you can read your guides. Passwords are stored hashed.
Cookies
We only use strictly necessary cookies and local storage for login and preferences (for example your theme). We use no tracking or advertising cookies, so no consent banner is needed. If this changes we will ask for your consent first.
Your rights
You have the right to access, correction, deletion, restriction, portability and objection, and to withdraw consent where processing is based on it. We respond within one month.
You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).
Children
Pagemint is not for people under 18.
Changes
We will post updates to this policy here with a new date.
Last updated: November 2026