Privacy Policy
Last updated: June 30, 2026
1. Introduction
OnePagey ("we," "us," or "our") is operated by ToS Tech LLC ("Company"), a limited liability company registered in Wyoming, United States, with a registered address at 30 N Gould St, Sheridan, WY 82801. This Privacy Policy explains how we collect, use, and protect information when you use our website builder service at onepagey.com and related applications. You can contact us by email at support@onepagey.com or by mail at ToS Tech LLC, 30 N Gould St, Sheridan, WY 82801, United States.
2. Information We Collect
We collect information you provide directly, including: • Email address (for passwordless sign-in and account identification) • Business name, description, and website content you submit for AI generation • Domain preferences and chosen domain name • ICANN registrant contact details (name, email, phone, postal address) collected after payment for domain activation • Images you upload for your website • Support messages you send through our contact form We do not collect or store payment card numbers. Payments are processed on Stripe's hosted Checkout pages. We also collect technical and usage data such as device type, browser, IP address, the pages and steps you visit, and (with your consent) analytics events.
3. How We Use Information
We use your information to create and host your website, authenticate you, process payments, register domains, publish registrant/WHOIS data as required by ICANN, send transactional emails, provide customer support, improve our service, and comply with legal obligations. We store what you enter to build your site; we do not share it with analytics or advertising providers. The business details you provide are used to deliver your website — they are never sent to analytics or advertising tools. We may use aggregated or anonymized usage patterns (for example, which steps users complete or abandon) to improve the product. We do not use your content to train our own machine-learning models.
4. AI & Automated Processing
AI features send your business inputs (such as business name, description, and edit prompts) to OpenAI to generate or revise website content. Generated output is provided as a draft for you to review before publication. OpenAI processes this data according to its own terms and privacy policy. We also use automated content moderation, including OpenAI's Moderation API, to screen text and images you submit for safety before publication. This may include assigning an internal risk score. Moderation is used to keep the service safe; it is not a guarantee that all harmful content will be detected. We do not make solely automated decisions that produce legal or similarly significant effects about you.
5. Passwordless Authentication
Sign-in is passwordless. We use Stytch to verify your identity by email one-time passcode (a 6-digit code) or Google sign-in, and then establish your session through Firebase Authentication. We store your email as your account identifier. We do not use passwords for OnePagey accounts. If you sign in with Google, Stytch and Google may provide basic profile information such as your name, email address, and profile picture, as permitted by your Google account settings and Google's policies.
6. Cookies & Similar Technologies
We use cookies and similar technologies in three groups: • Strictly necessary — required to sign you in, keep you logged in, and remember your cookie choices (for example, Stytch and Firebase authentication cookies and our consent-preference cookie). These cannot be switched off. • Usage analytics (optional) — help us understand which pages and steps work well. Set only with your consent. • Advertising (optional) — used to measure our own advertising. Set only with your consent. Before you sign in, we may temporarily keep your funnel answers in your browser's session storage so you don't lose them. You can review or change your optional cookie choices anytime via the "Cookie settings" link in the footer. In regions that require it, optional cookies are off until you opt in.
7. Analytics
With your consent, we use Google Analytics 4 to collect anonymous statistics about how the service is used — such as pages visited, buttons clicked, time on a step, and where users drop off. We configure analytics with IP anonymization and Google Consent Mode, so no analytics cookies or data are collected until you opt in. We do not send your business name or description to analytics. You can withdraw consent at any time through Cookie settings.
8. Advertising & Conversion Measurement
We advertise OnePagey on third-party platforms such as Google Ads. With your consent, we use conversion-tracking tags to understand whether our ads led you to sign up or subscribe. This is used only for measuring and improving OnePagey's own advertising. We do not sell your personal information. Sharing data with advertising platforms for this purpose may, under some laws, be considered "sharing" — you can opt out anytime through Cookie settings and your Google Ad Settings.
9. Domain & WHOIS Data
When you activate a custom domain, the registrant contact information you provide is used to register the domain in your name and may be published in public WHOIS/RDAP records as required by ICANN and your registrar. You are responsible for keeping this information accurate and current.
10. Third-Party Processors
We rely on trusted providers that process data on our behalf: • Stytch — passwordless authentication (email OTP and Google sign-in) • Google Firebase — session/identity, application database, and file storage for uploaded images • Google Analytics — usage analytics (with consent) • Google Ads — advertising and conversion measurement (with consent) • Stripe — hosted Checkout and subscription billing (we do not store card numbers) • Vercel — website hosting and deployment • Domain registrars — domain registration and DNS • Resend — transactional and support email delivery • OpenAI — AI-assisted website content generation and automated content moderation • Pixabay — royalty-free stock image search used during website generation (selected images are copied to and served from our own storage) These services process data according to their own privacy policies and our agreements with them.
11. International Data Transfers
We are based in the United States and process personal data primarily in the United States. If you access OnePagey from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. If you are in the EEA, UK, or Switzerland, we rely on appropriate safeguards for international transfers where required, which may include adequacy decisions and Standard Contractual Clauses approved by the European Commission or UK authorities, supplemented by additional measures where appropriate.
12. Legal Bases (EEA/UK)
If you are in the EEA, UK, or Switzerland, we process personal data under these legal bases: performance of our contract with you (to create and host your website, authenticate you, and process payments); your consent (for optional analytics and advertising cookies); our legitimate interests (to keep the service secure and prevent abuse); and compliance with legal obligations.
13. Data Retention & Security
We retain information as long as needed to provide the service and meet legal obligations: • Account and website data — while your subscription is active and for a reasonable period afterward (for example, to handle support requests or disputes) • After subscription ends — hosting is deactivated; we may retain account and website content for a limited period before deletion • Support messages — for the period needed to resolve your request and maintain records of our communications • Analytics data — according to Google Analytics retention settings and your cookie choices • Registrant/WHOIS data — for as long as required by ICANN, registrar policies, and applicable law We implement administrative, technical, and organizational safeguards designed to protect personal data, but no method of transmission or storage is completely secure. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.
14. Children's Privacy
OnePagey is not directed at children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a child under 18, please contact us at support@onepagey.com and we will take steps to delete it.
15. Your Rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection supervisory authority. If you are a California resident, you may have the right to know what personal information we collect, to delete it, and to opt out of the sale or sharing of personal information. We do not sell your personal information. Our use of advertising conversion measurement may be considered "sharing" under California law; you can opt out through Cookie settings. We will not discriminate against you for exercising your privacy rights. To exercise any of these rights, contact us at support@onepagey.com, by mail at the address in Section 1, or through our support page at onepagey.com/support. You can also use Cookie settings to manage optional cookies.
16. Contact & Changes
Questions about this Privacy Policy: contact us at support@onepagey.com, by mail at ToS Tech LLC, 30 N Gould St, Sheridan, WY 82801, United States, or through our support page at onepagey.com/support. We may update this policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. If we make material changes, we will also notify you by email to the address associated with your account and/or through a prominent notice on the service.