This Privacy Policy explains how Shareable (“Shareable,” “we,” “us”) collects, uses, and protects information when you use our website, app, API, and MCP server (together, the “Service”). By using the Service you agree to this policy.

Information we collect

Account information. When you create an account we collect your email address and name. If you sign in with Google, we receive your email, name, and profile image from Google. Passwords are handled by our authentication provider and stored only as a secure hash — we never see your plaintext password.
Content you publish. The pages, HTML, PDFs, images, titles, and link settings you upload or publish, plus the access settings you choose (for example, invited email addresses or a page password).
Viewer analytics. When someone opens a page you published, we record view events to power your analytics — including a coarse approximate location and device or browser type derived from the request, and the viewer’s email address onlywhen you choose an access mode that verifies it (invited people, verified-email, access requests, or comments). We do not sell this data.
API keys. If you create API keys to use the API or MCP server, we store them as a secure hash so we can authenticate your requests.
Payment information. If you purchase a paid plan, payments are processed by Stripe. We receive limited billing details (such as plan and status) but never your full card number.
Cookies. We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use third-party advertising cookies.

What we receive from AI assistants

When you connect an AI assistant (such as Claude, ChatGPT, or Gemini) to Shareable through our API or MCP server, we receive only the content and parameters you direct the assistant to publish — for example, the HTML or file, a title, and access settings. We do not receive, request, or store your conversation history, prompts, assistant “memory,” chat summaries, or any other data from your AI session, and we do not access data in your AI account beyond what is sent to publish a page.

How we use information

To provide, operate, and secure the Service — hosting your pages and serving them to viewers.
To show you analytics about your pages and send notifications you turn on (for example, an email when a page is viewed or when someone requests access).
To authenticate API and MCP requests, and to enforce access controls and rate limits.
To communicate with you about your account, security, and changes to the Service.
To detect, prevent, and address abuse, fraud, and policy violations.

How we share information

We do not sell your personal information. We share data only with service providers that help us run the Service, and only as needed:

Supabase — database, authentication, and file storage.
Vercel — application hosting and content delivery.
Resend — transactional email (sign-in links, notifications, access requests).
Google — sign-in, if you choose Google authentication.
Stripe — payment processing, if you purchase a paid plan.

We may also disclose information if we have a good-faith belief it’s reasonably necessary to comply with law or legal process, to enforce our Terms, to address fraud or security issues, or to protect the rights, property, or safety of our users or the public. If we’re involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we’ll continue to protect it under this policy and notify you of any change in how it’s handled. Note: pages you publish are served to whoever you grant access to; if you choose “anyone with the link” or make a page public, its contents are visible to anyone who has the link.

Third-party links and embeds

Pages you publish, and parts of the Service, may link to or embed third-party sites and tools (forms, calendars, payment links, and similar). We don’t control and aren’t responsible for the privacy practices of those third parties, and this policy doesn’t apply to them. We encourage you to review the privacy policies of any third-party services you embed or visit.

Data retention

We keep your account information for as long as your account is active. Pages and files are retained until you delete them or delete your account. Analytics are retained while the related page exists. When you delete a page or your account, we remove the associated content from active systems; residual copies in backups are purged on a rolling basis.

Deleting your account

You can delete your account yourself at any time, from Plan & billing in the app (the “Danger zone”). Deleting your account is immediate and permanent: it removes all of your pages, files, folders, version history, comments, approvals, and view analytics; your API keys; your stored content in our file storage; and your sign-in. Your shared links stop working right away. If you have a paid plan, your subscription is canceled at the same time and you won’t be billed again (finalized invoices are retained by our payment processor only as required for tax and legal compliance). We email you a confirmation when it’s done. This action can’t be undone.

Your rights

You can access and update your account information in the app, delete individual pages at any time, and delete your entire account and its data yourself (see above). Depending on where you live (for example, under GDPR or CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any right we don’t already offer in the app, email us at support@useshareable.com. We do not sell personal information.

You can opt out of promotional emails at any time using the unsubscribe link in those messages or your account settings. We may still send you administrative or transactional messages (for example, security notices, receipts, or changes to this policy), which are not promotional.

Security

We protect data in transit with HTTPS, store it with reputable cloud providers, hash credentials and API keys, and apply access controls. No method of transmission or storage is 100% secure, but we work to protect your information and to limit access to it.

Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

International users

We operate in the United States, and your information may be processed and stored there. By using the Service, you understand your information may be transferred to and processed in the United States and other countries where our providers operate.

Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above. For material changes, we’ll provide additional notice — by email to the address on your account or a prominent notice on the Site — at least 30 days before they take effect; minor changes or clarifications take effect immediately. Please check this page periodically.

Contact

Questions about this policy or your data? Email us at support@useshareable.com.