PAGEFORM
Privacy Policy
Posted: January 22, 2026
Effective: January 22, 2026
Last Updated: October 16, 2026
This Privacy Policy (“Privacy Policy”) explains how Pageform LLC (“Pageform,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with our websites, applications, and related services (collectively, the “Services”).
Pageform provides a hosted platform that enables customers with Pageform accounts (“Users”) to create, organize, and share virtual data rooms and documents (collectively, “Content”), and to analyze how such Content is accessed. Individuals who access Content shared through the Services but do not have a Pageform account are “Viewers.”
Users may access the Services through our website (pageform.io), applications, APIs, and integrations, including access via third-party platforms where Pageform functionality is embedded or linked. A “Device” means any computer or internet-connected device used to access the Services, including without limitation a desktop computer, laptop, mobile phone, tablet, or similar device.
If you do not agree with this Privacy Policy, do not use the Services.
1. Scope and Roles
1.1 Scope
This Privacy Policy applies to information collected from or about:
visitors to our websites
Users of the Services (including Organization administrators)
Viewers of Content shared through the Services
prospects and business contacts in sales, marketing, and events
1.2 Controller and Processor Roles
1.2.1 Pageform as Controller
Pageform acts as a data controller for Personal Data processed for its own purposes, including website operation, account creation, billing, marketing, security, and compliance.
1.2.2 Pageform as Processor
When Pageform processes Content and Viewer analytics on behalf of Users, Pageform acts as a data processor (or service provider), and the User or Organization acts as the data controller. In such cases, the User’s own privacy practices govern its relationship with Viewers.
Pageform is not responsible for the privacy practices of Users or third parties.
2. Definitions
Personal Data means information that identifies or can reasonably be linked to an individual.
Organization means a workspace under which Users collaborate within Pageform.
Usage Data means logs and event data relating to interactions with the Services.
Subprocessor means a third party that processes Personal Data on Pageform’s behalf to provide the Services.
3. Information We Collect
3.1 Information Users Provide
Users may provide:
account and profile information (name, email address, password, role)
Organization information (name, logo, cover image)
invitations (invitee email addresses and related metadata)
communications with us (support requests, feedback, and messages)
3.2 Viewer Information (When Enabled by the User)
A User may choose to require Viewers to enter an email address before accessing shared Content. When this option is enabled:
Pageform collects the Viewer’s submitted information (for example, email address) on behalf of the User
Pageform also collects access and engagement analytics as described below
3.3 Content
We process Content uploaded to the Services, including documents, files, folders, and related metadata. Content may include Personal Data if Users choose to include it. Pageform processes Content to store it, display it, share it, analyze access, and provide requested functionality.
We store and process Content to provide data room functionality, including secure hosting, sharing, analytics, and AI-assisted features.
3.4 Automatically Collected Information
When Users or Viewers interact with the Services, we collect:
Device and network information: IP address, browser type, operating system, device type, language, time zone, and referrer URLs (where available)
Usage and system logs: authentication events, feature usage, navigation events, timestamps, and error logs
Engagement analytics for Content, which may include:
whether Content was accessed
date and time of access
number of views
duration of viewing and interaction signals (where supported)
approximate geographic location derived from IP address (city, region, country)
access method (for example, direct link or forwarded link, where detectable)
3.5 Cookies and Similar Technologies
We use cookies and similar technologies for authentication, session management, preferences, security, and first-party product analytics (see Section 5.2). These technologies help us keep users logged in, protect accounts, and understand how the product is used.
We do not use cookies for third-party behavioral advertising.
3.6 Payment Information
Payments are processed by Stripe. Pageform does not store full payment card numbers. We receive billing and transaction metadata such as subscription status, invoices, and payment confirmations.
3.7 Connected Assistants
If you connect Pageform to a third-party assistant, such as ChatGPT or Claude, we record that connection. The record includes which assistant you approved, the authorization, and related security logs.
Pageform receives the request that assistant sends for an action you asked it to take. We do not receive that assistant’s other conversations, its memory, or files you did not include in that request.
4. How We Use Information
4.1 Provide and Operate the Services
We use information to:
create and manage accounts, Organizations, permissions, and access controls
store, transmit, and display Content
enable Viewer email gating when selected by Users
generate access logs and engagement analytics for Users
provide customer support and respond to requests
return information from your account to an assistant you have connected, limited to the request it sends
4.2 Security and Abuse Prevention
We use information to detect, prevent, and investigate fraud, abuse, and unauthorized access; to enforce plan limits and our Terms of Service; and to maintain audit logs necessary for security and reliability.
4.3 Billing and Administration
We use information to process subscriptions, invoices, and related account administration.
4.4 Product Improvement
We use information to debug, test, and improve functionality and performance, and to analyze aggregated and internal usage trends, including events stored in our internal audit and analytics systems.
4.5 Communications
We use information to send transactional and service-related communications, and to send marketing communications where permitted by law. You may opt out of marketing emails at any time.
5. Document AI, Automated Processing, and Product Analytics
5.1 AI Features
Pageform offers features that use third-party AI services:
Microsoft Azure — Azure AI Foundry models for chat, structure, and related generation; Azure Document Intelligence for document text extraction and parsing
Google Cloud Vertex AI — Gemini models for certain features, including Viewer document and room summaries
When these features are used, Content or portions of Content (for example, extracted text, section titles, or chat context) may be transmitted to these providers solely to provide the requested functionality.
Pageform does not use Customer Content to train Pageform’s own models or models for other customers, and we do not use Customer Content for advertising. Customer Content processed through Microsoft Azure AI Foundry and Google Cloud Vertex AI is not used to train shared generative AI models and is not made available to the underlying model providers for training.
AI features operate only on Content you or your Organization choose to upload or make available within the Services.
5.2 Product Analytics and AI Observability (PostHog)
Pageform uses PostHog, Inc. as a subprocessor for:
Product analytics. Feature usage, navigation, and similar events (for example, that a User opened AI chat or clicked a control). These events identify the User where they are logged in (account id, email, organization id) so we can debug and improve the product. They are not a copy of your data room files.
AI observability. When you use AI Features, we may send traces of the model call to PostHog (model name, latency, token counts, and truncated input/output text). Those traces can include excerpts of Content or chat that were sent to the model, so we can operate, debug, and measure AI Features. We do not use those traces to train a Pageform or third-party model.
We do not use PostHog for third-party advertising or to sell Personal Data.
Pageform uses PostHog session replay to help diagnose issues and improve the product experience. Session replay may capture interactions with the Pageform interface and information visible on screen. Passwords and sensitive input fields are masked from recordings. We use session replay for product debugging and product improvement, not advertising.
7. Viewer Analytics and User Visibility
Pageform provides Users with analytics regarding access to their Content. Depending on configuration, the following may be visible to the User or Organization that shared the Content:
Viewer email addresses (if collected)
IP-derived location data
timestamps and engagement metrics
If you are a Viewer and wish to stop receiving communications from a User, contact that User directly.
8. Organization Administrators
If you use Pageform through an Organization, administrators may be able to:
manage your account and permissions
access Content and analytics available within the Organization
control retention and deletion settings where available
Your relationship with your Organization is governed by its internal policies.
9. Data Retention
We retain Personal Data as long as necessary to:
provide the Services
maintain security, audit logs, and system integrity
comply with legal obligations
resolve disputes and enforce agreements
Deletion of Content follows product functionality and User actions. Certain logs may be retained for security and compliance purposes.
Customer Content is retained for as long as the account is active or as needed to provide the Services. Upon account deletion or written request, Content is deleted within a commercially reasonable timeframe, subject to legal obligations and backup retention policies. Residual copies may persist temporarily in backups but are not actively used.
10. Security
We implement reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption in transit, and monitoring appropriate to the nature of the information and the Services.
No system is completely secure. Pageform cannot guarantee the absolute security of information transmitted to or stored on the Services.
Users are responsible for maintaining the confidentiality of their account credentials, controlling access to their Devices, and managing sharing settings and links. Pageform is not responsible for unauthorized access resulting from compromised credentials or user actions.
If we become aware of a security incident involving Personal Data, we will take reasonable steps to investigate and mitigate the incident and provide notice where required by applicable law.
Security inquiries may be directed to [email protected].
11. International Data Transfers
We may store and process information in the United States and other countries where we or our service providers operate. Where required by law, we use appropriate safeguards for cross-border data transfers.
12. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, restrict processing, object to processing, or request portability of your Personal Data.
Users may update certain information through account settings.
Marketing emails include opt-out instructions.
Rights requests may be submitted to [email protected].
If a request relates to data processed on behalf of a User or Organization, we may direct the request to that customer or assist as required by law.
13. European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)
This section applies if you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland.
13.1 Legal Bases for Processing
Pageform processes Personal Data only where permitted by applicable law, including where processing is:
necessary for the performance of a contract (for example, providing the Services)
necessary for our legitimate interests (such as security, fraud prevention, service improvement, and customer support), provided those interests are not overridden by your rights
based on your consent, where required by law
necessary to comply with a legal obligation
13.2 Controller and Processor Roles
As described in Section 1.2:
Pageform acts as a data controller for Personal Data processed for its own operational purposes
Pageform acts as a data processor when processing Content and Viewer analytics on behalf of Users. In those cases, the User or Organization is the data controller.
Where required, Pageform makes available a Data Processing Addendum (“DPA”), including Standard Contractual Clauses, upon request.
13.3 Data Subject Rights
Subject to applicable law, you may have the right to:
access your Personal Data
request correction or deletion
restrict or object to processing
request data portability
withdraw consent where processing is based on consent
lodge a complaint with a supervisory authority
Requests may be submitted to [email protected]. If a request relates to data processed on behalf of a User or Organization, we may refer you to the relevant controller.
13.4 International Transfers
Personal Data may be transferred to and processed in countries outside the EEA, UK, or Switzerland. Where required by law, Pageform relies on appropriate safeguards such as Standard Contractual Clauses to enable such transfers.
14. California Privacy Notice (CCPA / CPRA)
This section applies to California residents.
14.1 Categories of Personal Information Collected
Depending on how you interact with the Services, Pageform may collect:
identifiers (such as name, email address, IP address)
commercial information (such as subscription and billing metadata)
internet or network activity (such as usage logs and interaction events)
approximate geolocation data (derived from IP address)
professional or employment information (such as organization and role)
inferences drawn from usage patterns to improve the Services
14.2 Purposes of Collection
Personal Information is collected and used for the purposes described in this Privacy Policy, including operating the Services, security and fraud prevention, billing, customer support, and product improvement.
14.3 Disclosure of Personal Information
Pageform may disclose Personal Information to service providers for business purposes, as described in Section 6. Pageform does not sell Personal Information.
14.4 Sale or Sharing of Personal Information
Pageform does not sell Personal Information. Pageform does not share Personal Information for cross-context behavioral advertising and does not use third-party advertising pixels or similar tracking technologies for targeted advertising.
14.5 California Consumer Rights
Subject to applicable law, California residents may have the right to:
request disclosure of the Personal Information collected about them
request deletion or correction of Personal Information
not be discriminated against for exercising privacy rights
Requests may be submitted to [email protected]. We may need to verify your identity before processing a request, consistent with applicable law.
15. Children’s Privacy
The Services are not intended for children under 13 (or the minimum age required by local law). We do not knowingly collect Personal Data from children.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated as required by law. The Effective Date reflects when the current version applies.
17. Contact Us
Pageform LLC
Florida, United States
Email: [email protected]
Address: 7901 4th St N Ste 300, St. Petersburg, FL US 33702