Privacy Notice
Last updated: 2026-09-12
This Privacy Notice explains how Dealiverym Co., Ltd.(“we”, “us”) collects, uses, and protects personal data when you use pagesss (the “Service”).
1. Data We Collect
- Account data — email address and authentication identifiers when you sign up or log in.
- Content data — the pages, text, images, and site data you create or upload.
- Payment data — processed by Paddle; we receive transaction records (e.g. plan, amount, status) but not full card numbers.
- Usage data — logs, device/browser information, and analytics needed to operate and improve the Service.
- Connector data— if you connect our MCP connector (section 10): OAuth authorization codes and tokens (stored only as SHA-256 hashes), the granted scopes and grant id, the connecting client’s registration or public metadata document, and per-day counters of your tool and generation calls used to enforce abuse limits.
2. How We Use Data
We use personal data to provide and maintain the Service, process payments, communicate with you, prevent abuse, comply with legal obligations, and improve our features.
3. Payment Processing
Payments are handled by Paddle, which acts as Merchant of Record and as an independent controller of the payment data it collects. Please review Paddle’s own privacy policy for details on how they process your information.
4. Sharing & Sub-processors
We do not sell your personal data. We share data only with the service providers we need to operate the Service, and only for that purpose:
- Anthropic — AI generation and editing, and, if you connect our MCP connector, the recipient of the tool results your AI client requests (see section 10).
- Google Cloud / Firebase — database, authentication, and file storage.
- Vercel — hosting and serverless execution, and domain registration when you buy a domain through us.
- Paddle — payments, as Merchant of Record (see section 3).
- Resend — transactional and newsletter email delivery.
- Trigger.dev — running long background jobs such as site and article generation.
- OpenAI, Google (Gemini), Mux, ScreenshotOne — image generation, video generation, video streaming, and reference-site screenshots, for the features that use them.
We also disclose data when required by law, and we may transfer data as part of a merger, acquisition, or sale of assets, in which case we will notify you.
5. Data Retention
We retain personal data for as long as your account is active, and thereafter as required for legal, accounting, or security purposes. Specific periods:
- Account and site content — kept while the account exists; deleted, together with any published snapshot, when you delete the site or the account.
- Payment records — retained as required by tax and accounting law (five years in the Republic of Korea).
- OAuth authorization codes — 10 minutes, and deleted the moment they are exchanged (single use).
- OAuth access tokens — 1 hour.
- OAuth refresh tokens — up to 60 days, replaced on every use; all tokens of a grant are deleted immediately when you disconnect the connector or when we detect a reused token.
- Abuse-prevention counters (daily tool-call and generation limits) — 2 days.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.
7. Security
We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. International Transfers
Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
9. Changes
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.
10. MCP Connector (Claude and other AI clients)
pagesss offers a remote MCP (Model Context Protocol) server at https://pagesss.ai/api/mcp. Connecting it lets an AI client such as claude.ai or Claude Code act on your sites on your behalf. This creates data flows that are specific to the connector.
What we store when you connect.When you complete the consent screen we store an authorization code and then a token pair. Tokens are opaque random values, not JWTs, and we store only their SHA-256 hash — we cannot recover the token itself from our database. Each record holds your user id, your account email, the client identifier, the scopes you granted, the grant id, and expiry timestamps. We also store the client’s public metadata document (or its dynamic registration) and a per-day counter of your tool and generation calls, which we use only to enforce abuse limits.
What leaves our systems when a tool runs.A tool result is returned to the AI client that called it and becomes part of that client’s conversation context. Depending on the tool and the scopes you granted, a result can contain your site’s page HTML, article content, board post titles and author names, rows from your site’s database collections (including form submissions, bookings, and member records), your credit balance and plan, and your domain list. If your client is Claude, that content is processed by Anthropic under Anthropic’s own terms and privacy policy. We do not control, and are not responsible for, how long your AI client or its provider retains a conversation.
Your control. The consent screen lists every scope before you approve, and you can withhold AI generation (which spends credits) while granting the rest. Identity always comes from the verified token, never from a tool argument, and every site access is re-checked against your edit rights, so a connected client can only reach sites you can already edit. You can revoke access at any time — claude mcp remove pagesss in Claude Code, or removing the connector in claude.ai — which deletes the stored tokens for that grant. Buying a domain through the connector sends the registrant details you provide (name, phone, postal address) to Vercel Registrar and Paddle; no card is ever charged without you completing the payment yourself.
11. Contact
For privacy questions or requests, contact info@dealiverym.com.
Dealiverym Co., Ltd. ((주)딜리버리엠)
Representative: Kang Yu-kyung (강유경)
502, Seobu Gyeonggi Culture Creation Hub, Siheung Startup Center, 376 Mayu-ro, Siheung-si, Gyeonggi-do, Republic of Korea (경기도 시흥시 마유로 376, 시흥창업센터 서부경기문화창조허브 502호, 정왕동)
Business Registration No.: 597-86-01851
