Privacy Policy

1. Who We Are

PiratePage is operated by Overlab Holding BV, registered in the Netherlands (KvK: 62935313). We are the data controller for your personal data. You can reach us at hello@piratepage.cc.

2. What We Collect

We collect the following personal data:

• Account data: email address, name, and encrypted password when you sign up
• Content data: wizard answers, page content, edits, and generated output you create in PiratePage
• Usage data: pages visited, features used, generation requests, and interactions with the editor
• Technical data: IP address, browser type, device information, collected automatically

3. Why We Process Your Data

We process your data on the following legal bases under the GDPR (AVG):

• Contract performance (Art. 6(1)(b)): To provide PiratePage to you — account creation, AI generation, content storage, and exports.
• Legitimate interest (Art. 6(1)(f)): To improve our service, analyze usage patterns (aggregated), prevent abuse, and ensure security.
• Legal obligation (Art. 6(1)(c)): To comply with tax, accounting, and legal requirements.
• Consent (Art. 6(1)(a)): For optional marketing emails. You can withdraw consent at any time.

4. Third Parties

We share data with the following service providers:

• Google (Gemini AI): Your wizard answers and content are sent to Google's Gemini API to generate landing page content. Google processes this data under their API terms.
• Resend (email): Your email address is shared with Resend to send transactional emails (verification, password reset).
• Railway (hosting): Our application and database are hosted on Railway in the United States. Data is protected under appropriate safeguards.
• Paddle (payments): When you subscribe to a paid plan, Paddle processes your payment data as Merchant of Record.

5. International Transfers

Some of our service providers are based outside the EU/EEA (notably Railway and Google in the United States). Where data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions as appropriate safeguards under the GDPR.

6. Cookies

PiratePage uses essential cookies for authentication and session management. These are strictly necessary for the service to function and do not require consent. We do not use advertising or tracking cookies.

7. Data Retention

We keep your account and content data for as long as your account is active. When you delete your account, we remove your personal data within 30 days. Some data may be retained longer where required by law (e.g., invoicing records for 7 years under Dutch tax law).

8. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent at any time for consent-based processing

To exercise these rights, email us at hello@piratepage.cc. We will respond within 30 days.

9. Complaints

If you believe we are not handling your data correctly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Autoriteit Persoonsgegevens
autoriteitpersoonsgegevens.nl

10. Changes

We may update this privacy policy. We'll notify you of significant changes via email. The latest version is always available on this page.

11. Contact

Overlab Holding BV
Email: hello@piratepage.cc
KvK: 62935313