Privacy Policy

What PageGro collects, why, who it is shared with, and the choices you have.

Effective date: 12 September 2026

This Privacy Policy explains how RNS STAR LLC, a New York limited liability company at 99 Wall Street #112, New York, NY 10005, United States ("RNS STAR", "we", "us", "our"), handles personal data in connection with PageGro, the website builder available at pagegro.com, its dashboard, the websites our customers publish through it, and related email and support services (together, the "Service").

It applies to visitors of pagegro.com, to account holders ("Customers"), and, as described in section 3, to visitors of websites that Customers publish with PageGro ("Customer Sites"). By using the Service you agree to this policy. If you do not agree, please do not use the Service.

1. Our roles

For the personal data of visitors to pagegro.com and of Customers, RNS STAR is the data controller. For the content and visitor data of a Customer Site, the Customer is the controller and RNS STAR acts as a processor, handling that data only to host and operate the site on the Customer's instructions. Customers are responsible for publishing their own privacy notice on their site where the law requires one.

2. Information we collect

Account data. Name, email address, password (stored as a salted hash), avatar and profile details you add, and, if you sign in with Google, the name, email address and profile picture Google provides.

Business and site data. The business name, subdomain, template choice, pages, text, images, logos, contact details, social links and settings you enter to build a Customer Site, plus blog posts, form submissions and email accounts you create through the dashboard.

Billing data. Your plan, invoices, payment method type, transaction identifiers, billing address and, for card payments, the last four digits and card brand. Full card numbers are handled by Stripe and never reach our servers. bKash payments are handled by bKash.

Usage and device data. IP address, browser and device type, pages viewed, actions taken in the dashboard, referring URLs, approximate location derived from your IP address, and error logs. Our servers keep access logs for security and troubleshooting.

Communications. Messages you send to support, replies to our emails, and the content of contact forms you submit on pagegro.com.

Advertising identifiers. When you arrive from an advertisement we may record the click identifiers the advertising platform attaches to the visit (for example Meta's fbclid, _fbp and _fbc cookies) so that we can measure whether our advertising works. See section 6.

3. Customer Sites and their visitors

When you publish a site with PageGro, we host its pages, images and forms, keep server logs of requests to it, and store the messages visitors submit through its contact form so that you can read them in your dashboard. We process this data on your behalf and do not use Customer Site visitor data for our own marketing. Customer Sites may include third-party tools you choose to add, such as your own analytics or advertising pixel; those tools are governed by their own policies and by your privacy notice.

A small "Built with PageGro" link appears on free-plan sites. It does not set cookies or collect data from your visitors.

4. How we use personal data

  • To create and secure your account, sign you in, and provide the Service you requested;
  • To host, publish, back up and restore your Customer Sites and email accounts;
  • To process payments, issue invoices, prevent fraud and comply with tax and accounting obligations;
  • To answer support requests and send service messages (verification, password reset, invoices, renewal and expiry notices, security alerts);
  • To understand how the Service is used, fix errors and improve features;
  • To measure and improve our own advertising, as described in section 6;
  • To send product news and offers where you have agreed to receive them — you can opt out at any time from the link in the email or from your notification settings;
  • To detect, investigate and stop abuse, security incidents and violations of our Terms of Service;
  • To comply with the law and enforce our agreements.

Where the GDPR or UK GDPR applies, our legal bases are performance of our contract with you, our legitimate interests (running, securing and improving the Service and promoting it), your consent where we ask for it, and compliance with legal obligations.

5. Who we share data with

We do not sell personal data. We share it only with service providers that help us run the Service, under contracts that limit what they may do with it:

  • Payment processors: Stripe (card payments, worldwide) and bKash (Bangladesh);
  • Infrastructure: our own servers in Bangladesh and in the European Union (Poland), our content delivery network, DNS and TLS certificate services (Let's Encrypt);
  • Email delivery: our transactional email relay for service messages, and etechmail.com for business email accounts you create;
  • Sign-in and analytics: Google (Google sign-in; Google Analytics or Search Console if you connect them to your site);
  • Advertising measurement: Meta Platforms, as described in section 6;
  • Professional advisers and authorities where required by law, to protect our rights, or in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.

Some of these providers are located outside your country, including in the United States. Where we transfer data out of the EEA, the UK or Switzerland we rely on standard contractual clauses or an equivalent lawful mechanism.

6. Cookies and advertising measurement

Essential cookies and storage keep you signed in, remember your preferences and protect the dashboard against cross-site attacks. They cannot be switched off without breaking the Service.

Advertising measurement. pagegro.com and the dashboard use the Meta Pixel and Meta's Conversions API to tell Meta when a visit, sign-up, checkout or purchase happened, so that we can see which advertisements lead to customers and stop paying for those that do not. For this purpose we may send Meta your IP address, browser information, the Meta click identifiers described in section 2 and, for account holders, a one-way hash of your email address, phone number and name. Meta matches this against its own users under its Data Policy. You can limit ad tracking in your browser and in your Meta ad settings. Customer Site visitors are not measured this way unless the Customer adds a pixel of their own.

You can control cookies through your browser settings; blocking essential cookies will stop parts of the Service from working.

7. Retention

Account and site data are kept for as long as your account exists. When you delete your account, or after a free account has been inactive for 12 months and we have warned you by email, we delete or anonymise your account data and Customer Sites within 90 days. Invoices and payment records are kept for 7 years to meet tax and accounting obligations. Server logs are kept for up to 90 days. Backups roll off within 90 days of deletion.

8. Security

All traffic to pagegro.com, the dashboard and every Customer Site is encrypted with TLS. Passwords are stored as salted hashes. Access to production systems is limited to authorised staff using key-based authentication, and customer data is backed up regularly. No system is perfectly secure; if we learn of a breach that affects your personal data we will notify you and any regulator as the law requires.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. Residents of California have the right to know what personal information we collect and disclose, to delete it, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights; we do not sell personal information and we do not "share" it for cross-context behavioural advertising other than the measurement described in section 6, which you can opt out of by contacting us.

You can export your site content and delete your account from the dashboard at any time. For anything else, email support@pagegro.com. We answer within one business day and complete requests within 30 days. We may ask you to verify your identity first.

10. Children

The Service is for businesses and adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the Service or the law changes. The effective date at the top shows the latest version. For material changes we will notify account holders by email or in the dashboard before they take effect.

12. Contact