This policy explains how AiroPages (“we”) handles personal data when you use AiroPages and airopages.com.
What we collect
| Data | Why |
|---|---|
| Email address, username and password hash | To create and secure your account. Passwords are stored only as a one-way hash. |
| Billing details | Handled by Paddle. We receive your name, email, country, plan and transaction IDs, but never your card number. |
| URLs you submit and scan results | To run scans and show results, trends and grouped issues. |
| Basic auth credentials for staging sites | To audit protected pages. Encrypted at rest. |
| API key metadata | To authenticate the API and MCP server. Keys are stored as hashes. |
| Price checks | A hashed IP address and the domain you enter, to enforce limits and link the check to your account if you sign up. |
| Contact form messages | To answer you. |
| Email delivery data | Whether emails were delivered, so we can fix delivery problems. |
We do not sell personal data. Advertising cookies are used only to measure our own ads, and you can turn them off at any time (see Cookies).
Analytics
We use Plausible Analytics on airopages.com. It does not use cookies and does not collect personal data; it counts page views and events such as “Get started” in aggregate.
We also use Google Analytics and Google Ads measurement through Google Tag Manager, with Google Consent Mode. In the EU/EEA, the UK and Switzerland they set cookies only after you accept. Elsewhere they are on by default, and you can turn them off at any time in Cookie settings. Our Cookie Policy lists every cookie we use.
Retention
Scan history is kept according to your plan: 30 days for one-time scans, 90 days on Starter, 180 days on Pro and 365 days on Agency. Preview results are kept for a short period so you can view them. Account data is kept while your account is open and deleted within 30 days of account deletion, except records we must keep for tax and accounting.
Processors
We use these service providers to run AiroPages:
| Processor | Purpose |
|---|---|
| Paddle | Payments, tax and invoicing (merchant of record) |
| Resend | Transactional, notification and (with your consent) product news emails; receives replies to support emails |
| Railway | Application hosting and databases |
| Cloudflare | Bot protection (Turnstile) and report storage (R2) |
| Plausible | Cookieless website analytics |
| Website analytics and ad measurement (Google Tag Manager, Analytics, Ads), subject to your cookie choices |
Your rights
You can access, export, correct or delete your data. Most of this is available in the app; otherwise email [email protected]. If you are in the EU, UK or a similar jurisdiction, you may also complain to your data protection authority.
Emails
We send account, billing and audit notification emails. You can unsubscribe from scheduled-run emails at any time from the link in each email. Billing and account emails always send.
Changes
We will update this page when our practices change and note the date at the top.