Privacy Policy
The short version: businesses use programmable.page to make pages and send them to their customers. What a customer gives a page (a reply, a booking, a payment) belongs to that business, which decides what happens to it; we look after it for them. We don't sell personal data, show ads, or use it to train AI models.
1. Who we are, and our two roles
programmable.page (the “Service”) is run by Programmable, LLC, 3607 10th St NW, Washington, DC 20010, USA (“we”, “us”). Write to [email protected] about anything here.
- For the people a business sends pages to (its customers, and anyone who opens, answers, books, signs or pays from one of its pages), the business is in charge of your data (the “controller”). We handle it for them (as their “processor” or “service provider”) under our Data Processing Addendum. The business's name is on every page and every message about it.
- For the businesses and the people on their teams, and for visitors to our own site, we are the controller.
2. If a business sent you a page
What is kept
- What the business put on the page: often your name, and details like an amount, an address or an appointment time. The business writes the request; our AI may write the page from it.
- What you send through the page: a reply or form (with any name, email address, phone number and message you give), a booking (who, when, what for), an acceptance or signature (the name you type, and a keyed hash of your IP address as a record that it was you), and files you upload, which go straight to the business's own storage. We keep no copy of uploaded files.
- Payments: when you pay, you pay the business on Stripe's own checkout page, under the business's Stripe account. We never see your card details. We keep the amount, what it was for, its status, your email address if Stripe gives it, and any refund or recurring payment.
- How a page was sent to you: your email address or phone number, when it was sent, whether you agreed to texts, and when the page was first opened.
- A customer record, if the business saves you as a customer: name, email, phone, address, their notes, and when you agreed to get texts.
We count how many times each page is opened, per day, without recording who opened it. A browser's description of itself is looked at only to skip bots and is never stored.
Email and texts
A business can send you a page by email or, if you agreed to get texts from it, by text, and the Service can send reminders (a payment due, a booking coming up), confirmations and receipts on its behalf. The business confirms it has your agreement before it texts you. See section 3 for texts.
Why it is processed (legal bases)
On the business's behalf, to do what you and the business asked for: the business's basis is usually performing a contract with you, or its legitimate interest in serving its customers. On our own account, we keep the records needed to honour your opt-outs (a legal obligation) and to keep the Service secure and stop abuse, such as rate limits and reports of harmful pages (our legitimate interest).
3. Text messages
The Service sends and receives texts through Twilio. Texts go to:
- People who text or call the business's number to ask for a page: a reply with the page's link, or an answer to their request. They have asked for it by texting in.
- The business's own team: alerts they turned on (a payment came in, someone replied).
- Customers, only with their agreement, recorded by the business when it sends: a page, a payment reminder, a booking reminder or a follow-up.
Message frequency varies. Message and data rates may apply. Reply STOP to stop texts from our number at any time (you get one confirmation, then nothing more), START to allow them again, and HELP for help, or write to [email protected]. Agreeing to texts is never a condition of buying anything.
Mobile information (phone numbers and text-message consent) is not shared with third parties or affiliates for marketing or promotional purposes. We keep the record of a STOP for as long as the number could be texted again, so it keeps being honoured. How people agree to texts.
4. If you run a workspace, or work on one
- Account: your email address, your name if you give it, and your identity from the shared Programmable sign-in if you use it; the workspaces you belong to and your role.
- What you set up: pages, templates, brand, contacts allowed to text or email requests, customers, and keys for the services you connect (Stripe, your storage, your webhooks), stored encrypted and never shown back. Text keys, link keys and API keys are stored only as hashes.
- Requests: what you text, say or email to make a page. We use it to make the page, and keep a short log of incoming requests (who, when, what happened) for 7 days.
- Activity: a log of what happened in the workspace (pages made, sent, paid), used for limits, usage charts and support.
- Billing: if you upgrade to Pro, Stripe takes the payment and holds the card details; we keep the Stripe customer and subscription references and your plan.
We use this to provide the Service under our Terms (performing our contract), to keep it secure and improve it (legitimate interest), and to meet legal obligations such as tax records. We email you what running your account needs (sign-in codes, receipts, the alerts you set up) and, after you sign up, at most two getting-started emails: a welcome and one reminder if your first page hasn't gone out. Every getting-started email has a link to stop them, and you can turn them off under Account.
5. Visiting our site
We don't use advertising trackers or third-party cookies that follow you around the web. Cloudflare and our servers handle the technical data every web request carries (IP address, browser, the page asked for), and we hold IP addresses briefly to limit abuse. When you sign up with a new email address, Cloudflare Turnstile may check that you're not a bot. See Cookies.
If you try the preview on our home page, we read the public home page of the website you enter and pass its text to Anthropic's AI to fill an example page. The example is only shown to you: it isn't saved as a page, sent anywhere or given a link, and we don't keep the page we read. The same example is reused for a day for anyone who enters the same site. Cloudflare Turnstile may check that you're not a bot, and we count previews by IP address for a day to limit them.
Pages run in a locked-down sandbox on a separate site (programmable.onl) that sets no cookies and can't send what you type anywhere except back to the business. To draw a page, your browser may load open-source libraries from the jsDelivr network, which sees your IP address as any website you load does, and, on pages with a Pay button the business added, from Stripe.
6. Who receives personal data
- The business and its team: in the app, in exports, and at the business's own webhooks if it set any up.
- Services the business connects, under the business's own account and terms: its Stripe account (payments) or its own storage bucket (uploaded files), and the webhooks it sets up.
- Our service providers, who process data only on our instructions: listed in the DPA. Anthropic's AI reads requests and page content to write pages and check them for safety; it does not train on them.
- Authorities, if the law requires it; and a successor, if our business is sold or merged, on terms that keep this policy's protections.
Pages are private unless the business makes one public: they are reached only by their link, and aren't listed or indexed. We don't sell personal data or share it for cross-context behavioural advertising, and we don't use it to train AI models.
7. Where it is stored
Our servers, database and backups are in the United States (Virginia). If you are in the European Economic Area, the United Kingdom or Switzerland, transfers to us and our providers rely on the standard contractual clauses (with the UK addendum), or on the provider's certification under the EU-US Data Privacy Framework where it has one. Ask us for a copy of the safeguards.
8. How long we keep it
- Pages, replies, bookings, payments, customers and acceptances: until the business deletes them (each can be deleted on its own) or closes its workspace, which deletes everything in it straight away.
- Records of pages sent (who to, when): 90 days.
- The activity log: 90 days.
- The log of incoming texts, calls and emails: 7 days.
- Webhook deliveries: their contents are erased once delivered; failed ones are deleted after 7 days.
- Files a job made (a PDF, for example): 60 minutes.
- Daily open counts per page (no personal data): 400 days.
- Sign-in sessions: 30 days after last use, or until you sign out. Sign-in codes: 15 minutes.
- Opt-outs (STOP): as long as needed to keep honouring them.
- Rate-limit records with IP addresses: until their window ends, at most a day.
- Database backups are kept for 30 days, so deleted data leaves them within about 31 days.
9. How we protect it
Encryption in transit (TLS) everywhere; keys for connected services encrypted at rest; access keys stored only as hashes; pages isolated in a sandbox on a separate site with no access to cookies or the network; signed webhooks; encrypted off-site backups; and production access limited to the people who run the Service. No system is perfectly secure. If a breach affects your data, we will tell the people we must, without undue delay.
10. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, or Californian and other US state laws), you can ask to access your data, correct it, delete it, receive a copy, restrict or object to its use, and withdraw consent you gave. We won't treat you differently for using these rights.
- Customers of a business: write to the business first; it controls your data. You can also write to [email protected], and we will pass your request on and help the business answer it.
- Workspace members and visitors: you can download your data and delete your account in the app's Settings, or write to [email protected]. We answer within one month (45 days under US state laws), and may need to confirm it's you first. You may use an authorised agent.
If you are in the EEA or the UK and unhappy with how your data is handled, you can complain to your data protection authority. We would like the chance to put it right first.
11. Children
The Service is for businesses and is not meant for anyone under 18. We don't knowingly collect children's data; if you think we have, write to us and we will delete it.
12. Changes
If we change this policy, we will update the date at the top. If the change is material, we will also tell workspace owners by email or in the app before it takes effect.