Our Privacy Policy

This Privacy Policy (“Privacy Policy”) explains how Pageform LLC (“Pageform,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our websites, applications, and related services (collectively, the “Services”).

Pageform provides a hosted platform that enables customers with Pageform accounts (“Users”) to create, organize, and share virtual data rooms and documents (collectively, “Content”), and to analyze how such Content is accessed. Individuals who access Content shared through the Services but do not have a Pageform account are “Viewers.”

Users may access the Services through our website (pageform.io), applications, APIs, and integrations, including access via third-party platforms where Pageform functionality is embedded or linked. A “Device” means any computer or internet-connected device used to access the Services, including without limitation a desktop computer, laptop, mobile phone, tablet, or similar device.

If you do not agree with this Privacy Policy, do not use the Services.

Last Updated on February, 20, 2026

1. Scope and Roles

This Privacy Policy applies to information collected from or about:

  • visitors to our websites;

  • Users of the Services (including Organization administrators);

  • Viewers of Content shared through the Services; and

  • prospects and business contacts in sales, marketing, and events.

Controller and Processor Roles

  • Pageform as Controller. Pageform acts as a data controller for Personal Data processed for its own purposes, including website operation, account creation, billing, marketing, security, and compliance.

  • Pageform as Processor. When Pageform processes Content and Viewer analytics on behalf of Users, Pageform acts as a data processor (or service provider), and the User or Organization acts as the data controller. In such cases, the User’s own privacy practices govern its relationship with Viewers.

Pageform is not responsible for the privacy practices of Users or third parties.

2. Definitions

“Personal Data” means information that identifies or can reasonably be linked to an individual.

“Organization” means a workspace under which Users collaborate within Pageform.

“Usage Data” means logs and event data relating to interactions with the Services.

“Subprocessor” means a third party that processes Personal Data on Pageform’s behalf to provide the Services.

3. Information We Collect

3.1 Information Users Provide

Users may provide:

  • account and profile information (name, email address, password, role);

  • Organization information (name, logo, cover image);

  • invitations (invitee email addresses and related metadata); and

  • communications with us (support requests, feedback, and messages).

3.2 Viewer Information (When Enabled by the User)

A User may choose to require Viewers to enter an email address before accessing shared Content. When this option is enabled:

  • Pageform collects the Viewer’s submitted information (for example, email address) on behalf of the User; and

  • Pageform also collects access and engagement analytics as described below.

3.3 Content

We process Content uploaded to the Services, including documents, files, folders, and related metadata. Content may include Personal Data if Users choose to include it. Pageform processes Content to store it, display it, share it, analyze access, and provide requested functionality.

3.4 Automatically Collected Information

When Users or Viewers interact with the Services, we collect:

  • Device and network information: IP address, browser type, operating system, device type, language, time zone, and referrer URLs (where available).

  • Usage and system logs: authentication events, feature usage, navigation events, timestamps, and error logs.

  • Engagement analytics for Content, which may include:

    • whether Content was accessed;

    • date and time of access;

    • number of views;

    • duration of viewing and interaction signals (where supported);

    • approximate geographic location derived from IP address (city, region, country); and

    • access method (for example, direct link or forwarded link, where detectable).

3.5 Cookies and Similar Technologies

We use cookies and similar technologies for authentication, session management, preferences, security, and basic measurement. Additional details are available in our Cookie Policy.

3.6 Payment Information

Payments are processed by Stripe. Pageform does not store full payment card numbers. We receive billing and transaction metadata such as subscription status, invoices, and payment confirmations.

4. How We Use Information

4.1 Provide and Operate the Services

We use information to:

  • create and manage accounts, Organizations, permissions, and access controls;

  • store, transmit, and display Content;

  • enable Viewer email gating when selected by Users;

  • generate access logs and engagement analytics for Users; and

  • provide customer support and respond to requests.

4.2 Security and Abuse Prevention

We use information to detect, prevent, and investigate fraud, abuse, and unauthorized access; to enforce plan limits and our Terms of Service; and to maintain audit logs necessary for security and reliability.

4.3 Billing and Administration

We use information to process subscriptions, invoices, and related account administration.

4.4 Product Improvement

We use information to debug, test, and improve functionality and performance, and to analyze aggregated and internal usage trends, including events stored in our internal audit and analytics systems.

4.5 Communications

We use information to send transactional and service-related communications, and to send marketing communications where permitted by law. You may opt out of marketing emails at any time.

5. Document AI and Automated Processing

Pageform offers features that use third-party AI services, including:

Azure Document Intelligence for document text extraction and parsing; and

Google Gemini models (including gemini-2.5-flash-lite and other supported models) for document categorization and AI-assisted data room generation.

When these features are used, Content or portions of Content may be transmitted to these providers to produce requested outputs. Pageform does not use customer Content for advertising or to train third-party advertising systems.

6. How We Share Information

We do not sell Personal Data. We may share or disclose information as described below.

6.1 Your Use of the Services

Information you provide may be displayed or made available within the Services according to the settings and permissions you select. You are responsible for deciding what information to share and with whom.

When Viewers access Content shared by a User, certain information may be disclosed to the User or Organization that shared the Content, such as the Viewer’s email address (if required by the User), access timestamps, engagement metrics, and approximate location derived from IP address. Users may also choose to display their own identifying or contact information to Viewers within the document viewer.

Please consider carefully what information you choose to provide or make visible through the Services.

6.2 Vendors, Consultants, and Service Providers

We may share Personal Data with third-party vendors, consultants, and service providers who work on our behalf and require access to such information to operate, support, analyze, and improve the Services. These may include providers of cloud hosting, data storage, email delivery, payment processing, customer support, analytics, and document processing.

These service providers are authorized to process Personal Data only as necessary to perform services for Pageform and in accordance with our instructions, and they are subject to confidentiality and security obligations.

A current list of Pageform’s subprocessors is available upon request by contacting support@pageform.io.

6.3 Organization and Administrative Access

If you are a User associated with an Organization, your information and activity within the Services may be accessible to other authorized Users or administrators of that Organization in accordance with its settings, permissions, and internal policies.

6.4 Collaboration and Sharing Features

The Services include features that allow Users to share Content and collaborate with others. When you use these features, information such as your name, email address, profile information, and shared Content may be disclosed to the individuals you choose to collaborate with. Those individuals may further interact with, modify, or share Content according to the permissions you grant.

6.5 With Your Consent or at Your Direction

We may share information when you explicitly consent or direct us to do so, such as when you enable integrations or access the Services through third-party applications. We are not responsible for the privacy practices of third parties you choose to interact with.

6.6 Legal Requirements and Protection of Rights

We may disclose information if we believe in good faith that such disclosure is reasonably necessary to:

  • comply with applicable law, regulation, legal process, or governmental request;

  • enforce our Terms of Service, agreements, or policies;

  • protect the security, integrity, or rights of Pageform, our Users, Viewers, or the public;

  • prevent or investigate fraud, abuse, or security incidents; or

  • respond to an emergency involving potential harm to any person.

6.7 Business Transfers

If Pageform is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, information may be transferred as part of that transaction. We will provide notice where required by law and explain any choices you may have.

6.8 Aggregated or Anonymized Information

We may share aggregated or anonymized information that does not directly identify individuals for purposes such as analytics, reporting, and improving the Services.

7. Viewer Analytics and User Visibility

Pageform provides Users with analytics regarding access to their Content. Depending on configuration:

  • Viewer email addresses (if collected),

  • IP-derived location data, and

  • timestamps and engagement metrics
    may be visible to the User or Organization that shared the Content.

If you are a Viewer and wish to stop receiving communications from a User, contact that User directly.

8. Organization Administrators

If you use Pageform through an Organization, administrators may be able to:

  • manage your account and permissions;

  • access Content and analytics available within the Organization; and

  • control retention and deletion settings where available.

Your relationship with your Organization is governed by its internal policies.

9. Data Retention

We retain Personal Data as long as necessary to:

  • provide the Services;

  • maintain security, audit logs, and system integrity;

  • comply with legal obligations; and

  • resolve disputes and enforce agreements.

Deletion of Content follows product functionality and User actions. Certain logs may be retained for security and compliance purposes.

10. Security

We implement reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption in transit, and monitoring appropriate to the nature of the information and the Services.

No system is completely secure. Pageform cannot guarantee the absolute security of information transmitted to or stored on the Services.

Users are responsible for maintaining the confidentiality of their account credentials, controlling access to their Devices, and managing sharing settings and links. Pageform is not responsible for unauthorized access resulting from compromised credentials or user actions.

If we become aware of a security incident involving Personal Data, we will take reasonable steps to investigate and mitigate the incident and provide notice where required by applicable law.

Security inquiries may be directed to support@pageform.io.

11. International Data Transfers

We retain Personal Data as long as necessary to:

  • provide the Services;

  • maintain security, audit logs, and system integrity;

  • comply with legal obligations; and

  • resolve disputes and enforce agreements.

Deletion of Content follows product functionality and User actions. Certain logs may be retained for security and compliance purposes.

12. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict processing, object to processing, or request portability of your Personal Data.

  • Users may update certain information through account settings.

  • Marketing emails include opt-out instructions.

  • Rights requests may be submitted to support@pageform.io.

If a request relates to data processed on behalf of a User or Organization, we may direct the request to that customer or assist as required by law.

13. European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

This section applies if you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland.

13.1 Legal Bases for Processing

Pageform processes Personal Data only where permitted by applicable law, including where processing is:

  • necessary for the performance of a contract (for example, providing the Services);

  • necessary for our legitimate interests (such as security, fraud prevention, service improvement, and customer support), provided those interests are not overridden by your rights;

  • based on your consent, where required by law; or

  • necessary to comply with a legal obligation.

13.2 Controller and Processor Roles

As described in Section 1:

Pageform acts as a data controller for Personal Data processed for its own operational purposes; and

Pageform acts as a data processor when processing Content and Viewer analytics on behalf of Users. In those cases, the User or Organization is the data controller.

Where required, Pageform makes available a Data Processing Addendum (“DPA”), including Standard Contractual Clauses, upon request.

13.3 Data Subject Rights

Subject to applicable law, you may have the right to:

  • access your Personal Data;

  • request correction or deletion;

  • restrict or object to processing;

  • request data portability;

  • withdraw consent where processing is based on consent; and

  • lodge a complaint with a supervisory authority.

Requests may be submitted to support@pageform.io. If a request relates to data processed on behalf of a User or Organization, we may refer you to the relevant controller.

13.4 International Transfers

Personal Data may be transferred to and processed in countries outside the EEA, UK, or Switzerland. Where required by law, Pageform relies on appropriate safeguards such as Standard Contractual Clauses to enable such transfers.

14. California Privacy Notice (CCPA / CPRA)

This section applies to California residents.

14.1 Categories of Personal Information Collected

Depending on how you interact with the Services, Pageform may collect:

  • identifiers (such as name, email address, IP address);

  • commercial information (such as subscription and billing metadata);

  • internet or network activity (such as usage logs and interaction events);

  • approximate geolocation data (derived from IP address);

  • professional or employment information (such as organization and role); and

  • inferences drawn from usage patterns to improve the Services.

14.2 Purposes of Collection

Personal Information is collected and used for the purposes described in this Privacy Policy, including operating the Services, security and fraud prevention, billing, customer support, and product improvement.

14.3 Disclosure of Personal Information

Pageform may disclose Personal Information to service providers for business purposes, as described in Section 6. Pageform does not sell Personal Information.

14.4 Sale or Sharing of Personal Information

Pageform does not sell Personal Information. Pageform does not share Personal Information for cross-context behavioral advertising and does not use third-party advertising pixels or similar tracking technologies for targeted advertising.

14.5 California Consumer Rights

Subject to applicable law, California residents may have the right to:

  • request disclosure of the Personal Information collected about them;

  • request deletion or correction of Personal Information; and

  • not be discriminated against for exercising privacy rights.

Requests may be submitted to support@pageform.io. We may need to verify your identity before processing a request, consistent with applicable law.

15. Children’s Privacy

The Services are not intended for children under 13 (or the minimum age required by local law). We do not knowingly collect Personal Data from children.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated as required by law. The Effective Date reflects when the current version applies.

17. Contact Us

Pageform LLC
Florida, United States
Email: support@pageform.io