Privacy Policy

Overview

PayGate ("we," "us," or "our") operates the file paywall platform at getpaygate.com. Our service enables freelancers to upload files, set a price, and share a payment link with their clients. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using PayGate, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information (Freelancers)

When you create a PayGate account via magic link or Google OAuth (powered by Supabase Auth), we collect your email address and full name. This information is used to identify you within the platform and to communicate with you about your account.

Client Information

When a freelancer creates a deliverable, they may enter their client's name and email address. This data is stored to facilitate delivery notifications and payment confirmations. Clients do not create accounts on PayGate.

Files

Freelancers upload files to PayGate for delivery to their clients. Files are stored in a private bucket on Supabase Storage (hosted on AWS in the US-East-1 region). We do not access, review, or share the contents of your uploaded files.

Activity Logs

We record IP addresses when payment links are viewed or files are downloaded, along with download counts and timestamps. This data helps freelancers track deliverable activity and helps us detect abuse.

Payment Information

All payments are processed through Stripe Connect Express. PayGate never holds, processes, or has access to client payment card details. Funds flow directly from the client to the freelancer's Stripe account. Stripe collects and manages payment information under its own Privacy Policy.

How We Use Your Information

We use the data we collect to:

• Provide and operate the PayGate platform
• Process deliverable creation and file delivery
• Send transactional emails such as delivery notifications, payment confirmations, and payment reminders (via Resend)
• Display activity logs and download analytics to freelancers
• Detect fraud, abuse, and security issues
• Respond to support requests
• Improve the service based on aggregated, anonymized usage data

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Cookies and Tracking

PayGate uses only essential cookies required for authentication. Supabase Auth sets HTTP-only session cookies to keep you logged in. We do not use any advertising, marketing, or third-party tracking cookies.

We use Vercel Analytics for privacy-friendly, aggregated website analytics. Vercel Analytics does not collect personal data and does not use cookies.

Third-Party Services

PayGate relies on the following third-party services to operate. Each service processes data under its own privacy policy:

• Supabase — authentication, database, and file storage
• Stripe — payment processing via Stripe Connect Express
• Resend — transactional email delivery
• Vercel — hosting, serverless functions, and privacy-friendly analytics

We only share the minimum data necessary for each service to function (e.g., email addresses for sending transactional emails via Resend, Stripe account IDs for payment processing).

Data Storage and Security

Your data is stored on Supabase-managed infrastructure (AWS US-East-1 region). Files are kept in private storage buckets with access controlled through signed URLs that expire after use.

We implement reasonable security measures including encrypted connections (TLS), HTTP-only authentication cookies, Row-Level Security on database tables, and webhook signature verification for Stripe events. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

Uploaded files are deleted when a freelancer deletes the associated deliverable from their account. Account data is retained as long as your account is active.

If you request account deletion, we will remove your personal data, uploaded files, and associated records within a reasonable timeframe. Some data may be retained as required by law or for legitimate business purposes (e.g., transaction records for tax compliance).

Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Deletion — request deletion of your account and associated data
• Export — request a portable copy of your data

To exercise any of these rights, contact us at support@getpaygate.com. We will respond within 30 days.

Children's Privacy

PayGate is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of PayGate after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or your data, please contact us at support@getpaygate.com.