Privacy Policy
Last updated: November 2, 2026
Questions about this document? Email [email protected].
This policy explains how Fyntra Technologies, Inc. ("we", "us") collects, uses and protects personal data when you use PageLoadr. We are the personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the controller under the EU/UK General Data Protection Regulation (GDPR). This policy also covers the rights of California residents under the CCPA/CPRA.
Summary
- We collect only what we need to run your account, bill you and keep the Service secure.
- We do not sell or share your personal data for advertising.
- You can delete your account and data yourself at any time in Settings.
Data we collect
- Account data: email address, name (if your Google sign-in provides one), password (stored only as a secure hash by Supabase), your role and the date you accepted our Terms.
- Usage data: the pages you ask us to load (URL), whether each page loaded and was charged, how long it took, the time, a request reference and which API key was used. API keys are stored only as hashes.
- Billing data: your plan, subscription status and Paddle customer and subscription references. Card and payment details are collected and processed by Paddle, never by us.
- Technical data: IP address, browser user agent and request references in server logs, used for security, abuse prevention and fixing problems.
- Communications: messages you send us.
- Cookies: see our Cookie Policy.
Pages you load through the Service may contain information about other people. We process that content only to deliver it to you and do not keep the page content after delivering it. You are responsible for your lawful use of it (see the Acceptable Use Policy).
Why we use it, and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and run your account, provide the API, count credits | Contract |
| Process subscriptions through Paddle, keep tax and accounting records | Contract; legal obligation |
| Security, rate limiting, fraud and abuse prevention, debugging | Legitimate interests |
| Service emails such as low-credit alerts and security notices | Contract; legitimate interests |
| Optional analytics (none at present) | Consent |
Who we share it with
We share personal data only with service providers that process it on our behalf under written agreements, or where the law requires it.
- Paddle.com, our Merchant of Record, for checkout, payments, invoicing and tax. Paddle acts as an independent controller for payment data.
- Supabase, for sign-in and our database.
- DigitalOcean, for hosting our servers.
- Resend, for sending service emails.
- Google, only if you choose to sign in with Google.
We may disclose data if required by law or to protect our rights, users or the public. If our business is sold or merged, data may transfer to the new owner under this policy.
International transfers
Our providers process data in the United States, Japan and other countries. Where data leaves the Philippines, the EU/EEA or the UK, we rely on the providers' contractual safeguards, such as the European Commission's Standard Contractual Clauses, and we remain accountable for it as required by the Data Privacy Act.
How long we keep it
- Account and usage data: while your account is open. When you delete your account, it is removed from our live systems right away, and from backups within 30 days.
- Server logs: up to 30 days.
- Billing records: as long as tax and accounting law requires (generally up to 10 years in the Philippines). Paddle keeps its own records.
Security
We use encryption in transit, hashed passwords and API keys, access controls, database row-level security, rate limiting and audit logs. No system is perfectly secure. If a breach affects your personal data, we will notify you and the National Privacy Commission as the law requires.
Your rights
Depending on where you live, you have the right to be informed about, access, correct, delete, or receive a copy of your personal data; to object to or restrict processing; to withdraw consent at any time; and to complain to a regulator. You can delete your account yourself in Settings, or email [email protected]. We reply within 30 days and may need to verify your identity.
- Philippines: you may complain to the National Privacy Commission (privacy.gov.ph).
- EU/EEA and UK: you may complain to your local data protection authority.
- California: you may ask what we collect and why, and ask us to delete or correct it. We do not sell or share personal information as defined by the CCPA/CPRA, and we will not treat you differently for using your rights. An authorized agent may make a request for you.
Children
The Service is not meant for anyone under 18, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
Changes
We will post updates here and change the "last updated" date. For material changes, we will notify you by email or in your dashboard.
Contact and data protection officer
Fyntra Technologies, Inc., Purok 3, Brgy. Libertad, Butuan City, Philippines. Data protection and privacy requests: [email protected].