Privacy policy

1. Who we are, and our role

Pagyra is operated by [Pagyra LLC], [100 Example Street, Suite 200, Cheyenne, WY 82001, United States].

For content in a workspace (documents, comments, images, and information about the people in it), the organisation that owns the workspace decides how it is used, and we process it on their behalf. If you have a question about that content, ask your workspace admin first; we will help them answer it.

For your account, billing and this website, we decide how the information is used and are responsible for it.

2. What we collect

When you have an account

• Your name and email address.
• Your password, stored only as a one-way hash (argon2id). We cannot see or recover it.
• Which workspaces you belong to, and your role in each.

What you create

• Documents, their version history, comments and uploaded images, stored in your workspace.

When you pay

• Card details go straight to Stripe. We never see or store your full card number; we keep the subscription, number of billed seats and billing dates.

When someone opens a share link

• Each visit is recorded in the workspace’s audit log: the time, the document, the link, the visitor’s IP address and their browser’s user agent. On Enterprise, admins can choose to keep IP addresses in shortened form.
• People who comment without an account give a display name, which is shown with their comments.

To keep Pagyra working

• Server logs of requests, kept by our hosting provider.
• Error reports, with request bodies, cookies, credentials and document content removed before they leave our servers.
• For workspaces using AI, a daily count of AI requests and their size, not their content.

When you contact us

• Your email and what you write to us, used only to reply.
• Support chat (in the app, and on our website when it is switched on): the messages and files you send us, any rating or feedback you give, and the page you were on when you started the chat (its address only, without anything after a “?”). If you are signed in to Pagyra, it also knows your name, email address, support ID, and the workspaces you belong to with their plan and your role, so we can help you; on the website, if you are not signed in, only what you choose to tell us, such as an email address for our reply. To limit abuse we keep a scrambled form of your IP address for up to an hour; we never store the IP address itself. If a reply from our team goes unread and we have your email address, we may email it to you.

3. Cookies and tracking

The Pagyra app uses two cookies: a session cookie that keeps you signed in, and a language cookie that remembers the language you chose. The session cookie is marked HttpOnly, Secure and SameSite=Lax; neither holds personal information itself.

The support chat sets no cookies. It keeps a random identifier in your browser’s local storage so your conversation is still there when you come back; if that identifier is not used for 180 days, we forget the link between it and your conversation. It also remembers whether you hid the chat icon: on the website only for that visit, in the app until you ask for support again. You can clear both by clearing your browser’s site data.

This website, pagyra.com, sets no cookies. Neither the app nor the website contains advertising, third-party analytics or session-replay code, and our fonts and icons are served by Pagyra itself, so no outside service learns that you visited. That is why there is no cookie banner.

If you choose a language at the foot of a page, your browser keeps that choice in its own local storage so the website opens in it next time. It never leaves your browser, and clearing your browser’s site data removes it.

4. How we use it

• To provide Pagyra: storing, syncing, searching and showing your documents.
• To keep it secure: sign-in, rate limits against abuse, and the audit log.
• To bill workspaces for their editors.
• To send the emails you need to use Pagyra: confirming your address, resetting your password, invitations, and notes about your workspace’s trial, plan and payments. Now and then we may send account news about changes to Pagyra. We send news, tips and offers only if you choose to receive them, when you sign up or in Your account, and every one of these emails lets you unsubscribe with one click. Unsubscribing does not stop the emails you need to use Pagyra. Our emails contain no tracking.
• To answer you when you contact us.

We do not:

• sell or rent personal information;
• use your content or activity for advertising;
• use your content to train AI models;

5. AI features

Gyra, the AI assistant, is on in every workspace, and a workspace admin can switch it off at any time. Nothing is sent until someone uses it. When someone in the workspace uses it, the relevant document content is sent from our servers to Anthropic to produce a response. [Anthropic does not use content sent through its API to train its models, and deletes it within 30 days unless it must keep it longer for safety or legal reasons].

6. Who processes your data

We use a small number of services to run Pagyra. Each one processes data only to provide its part of the service.

The full list, with what each service holds, is kept at pagyra.com/subprocessors. We update it before a new service starts processing customer data.

7. Where your data is stored

Pagyra stores data in the United States. If you are outside the US, your information is transferred there. For customers in the EU, UK and Switzerland we rely on [the EU Standard Contractual Clauses, with the UK addendum for UK customers], set out in our data processing agreement.

8. How long we keep it

When a workspace is deleted, its content is removed permanently after 30 days and is gone from our backups within a further 30 days: 60 days in all.

9. Security

• All traffic is encrypted with TLS. Stored files are encrypted at rest.
• Passwords and link passwords are hashed with argon2id; verification and reset links are single-use and short-lived.
• Every workspace is kept separate, and automated tests on each release check that no workspace can read another’s data.
• Production access is limited, uses multi-factor authentication, and is logged.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict how it is used, and to complain to your data protection authority. We give these rights to everyone, wherever they live.

Much of this you can do yourself: change your name and password in the app, and ask a workspace admin to export or delete a workspace. For anything else, email support@pagyra.com and we will reply within [30] days. For content in a workspace, we will work with its admin to answer you.

11. Children

Pagyra is a tool for work and is not meant for children under [16]. We do not knowingly collect their information.

12. Changes to this policy

If we change this policy in a way that matters, we will email account holders before the change takes effect and update the date at the top of this page.

13. Contact

[Pagyra LLC], [100 Example Street, Suite 200, Cheyenne, WY 82001, United States]. Email support@pagyra.com.