PageChute Website Privacy Policy

PageChute is operated by MSHL Holdings (“we,” “us,” or “our”). This policy explains how we handle personal information when you visit pagechute.com, request access to PageChute, or communicate with us about your request.

MSHL Holdings is responsible for deciding how this information is used and is its data controller.

Privacy contact: privacy@pagechute.com
Business address: 28210 Paseo Drive, Suite 190-220, Wesley Chapel, FL 33543, United States
Registered legal name: MSHL Holdings LLC, a Florida limited liability company

This policy covers our marketing website and access-request process. It does not describe the processing of customer account data, feedback submitted through the PageChute widget, screenshots, or Linear integration data.

Information we collect

When you request access, we collect:

• Name and work email address, which are required so we can identify and respond to your request.
• Company name, if you provide it.
• Your intended use of PageChute, if you choose to describe it.
• Your issue tracker and, if you choose, how you build your product, which you pick from a list.

The form also records the origin of the submission—the website address from which the request was sent—and your browser’s user-agent string, limited to 300 characters. A user-agent string describes browser and device software.

If you correspond with us, we receive the information you include in those messages.

We do not store IP addresses in our access-request database. Our infrastructure providers may separately process IP addresses and other technical information when delivering and protecting the website and form.

Please do not include passwords, payment details, sensitive personal information, or confidential information about other people in your request.

How we use information

We use the information you provide to review your request, understand your intended use of PageChute, and communicate with you about access.

We use technical information to operate the form, troubleshoot problems, and help prevent misuse.

Submitting an access request does not subscribe you to a newsletter or unrelated marketing. We do not sell access-request information or provide it to advertisers for their own marketing.

You can browse the marketing website without submitting an access request. If you do not provide the required form fields, we cannot process a request through the form.

Service providers and disclosures

We use service providers to operate the website and process access requests:

Submitting the form creates a database record and triggers a notification to the PageChute team. Information included in that notification is also held in our email system.

We may disclose information when required by applicable law or a binding legal process.

Where information is processed

Our access-request database is hosted through Supabase in the United States, in the US West region identified as us-west-1.

Our other providers may process information in additional locations. The database location does not mean that every copy of your information, including email and infrastructure records, remains in that region.

Railway hosts our website and runs the application that processes the form in its US West region. Resend sends our notification emails from its US East region (us-east-1). Cloudflare provides the domain name service for our domains through its global network. Our email hosting provider stores notification emails and correspondence in the locations where it operates.

If you submit a request from outside the United States, your information is transferred to and processed in the United States, where data protection laws may differ from those in your country. To ask how we protect information that is transferred internationally, contact privacy@pagechute.com.

How long we keep information

We keep access requests and related correspondence for up to 12 months after our last access-related communication with you. If we never correspond with you, we measure that period from the date you submitted the request.

At the end of that period, we delete the request from our active database and remove associated notification emails and correspondence under our control. You may request deletion sooner.

If we must retain specific information to meet a legal obligation, we keep only the information needed for that obligation and only for the required period.

Some copies follow their own schedules:

• Database backups. Our database is backed up daily, and each backup is kept for 7 days. A deleted request is gone from our backups within 7 days of its deletion.
• Hosting logs. Railway keeps our application and request logs for up to 30 days. Request logs can include IP addresses and user-agent strings. Our application does not write the contents of the form to its logs.
• Email delivery records. Resend keeps a record of each notification email it sends, including its content, for the data-retention period of our Resend plan.
• Our email account. Notification emails and correspondence stay in our email account until we delete them under the 12-month rule above.

Requesting access, correction, or deletion

To ask about your information, correct it, request a copy, or request deletion, email privacy@pagechute.com.

Where possible, contact us from the email address used for your access request. We may ask for limited additional information to verify that the request concerns your own information.

We will review your request and respond within the time required by applicable law. If we cannot fulfill part of it, we will explain why, unless the law prevents us from doing so.

Depending on the laws that apply to you, you may also have rights to restrict certain processing, object to it, obtain a portable copy of your information, or complain to a data protection authority.

You may object to processing based on legitimate interests where applicable law provides that right. If we rely on your consent for any processing, you may withdraw it without affecting processing that occurred before withdrawal.

Cookies and similar technologies

Our marketing website does not use cookies, analytics, advertising tools, or other tracking technologies, and it does not load content from other companies’ servers.

When you submit the access-request form, it saves what you typed in your browser’s session storage, in that browser tab only, so your entries are not lost if the form asks you to correct something. Saved entries are put back into the form only within 15 minutes of submitting. They are removed the next time the form page or the confirmation page loads, and when you close the tab.

Because the site does not track you across websites or sell or share personal information for advertising, browser privacy signals such as Global Privacy Control or Do Not Track do not change how it behaves: no tracking takes place either way.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. We will post the revised policy on this page and update its effective date.

For material changes, we will provide additional notice where required by law. If a change requires your consent, we will obtain it before applying that change to your information.

Contact

For questions about this policy or requests concerning your personal information, contact: