Privacy Policy

1. Introduction

This Privacy Policy explains how Squarepaste (“Squarepaste,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you use the Squarepaste app (the “App”), our private client live chat web application for the websites you build; when you visit squarepaste.com (the “Site”); when you purchase a plugin or template; or when you engage us for custom design work. By using the App or the Site, you acknowledge that you have read and understood the practices described here.

2. Information We Collect

We collect the following categories of information:

• App account information: When you create or manage an App account, your name, email address, and the website domains you connect to your account.
• Content you send through the App: Messages, tasks, files, photos, and voice notes exchanged between you and your clients through the chat widget and dashboard.
• Provided directly on the Site: Your email address (entered at checkout or in correspondence), your name (if provided), the Squarespace site URL you intend to license a plugin onto, and any project details you share through the intake form at /start or by email.
• Payment information: Card and billing details are collected and processed by Stripe, Inc. We do not see or store your full card number. We receive a confirmation that payment succeeded along with the customer email and the last four digits of the card.
• Automatically collected: Server logs containing your IP address, browser type, referring page, and timestamps. We use these for operational and security purposes only. The App may also collect general usage information through Google Analytics, if enabled.
• Browser storage: The Site uses browser sessionStorage to remember your in-progress plugin build while you move through the configure → checkout flow; it lives only on your device and is cleared when you close the tab. The App uses browser storage to keep you signed in.

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the App, including authentication, managing your subscription, enabling chat, and notifying you of activity in your account.
• Process and fulfill plugin and template orders, including delivering Squarespace invitations and transferring template ownership.
• Send order receipts, delivery notifications, and support replies.
• Operate the order-recovery flow at /requests/recover so you can recover your files using your order ID and email.
• Respond to support inquiries and custom-project requests.
• Evaluate and improve our products using aggregated or anonymized information.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell or rent your personal information to third parties. We do not send unsolicited marketing email. You will receive account- and order-related correspondence only, unless you have explicitly opted in.

4. Third-Party Services

We share limited information with the following service providers, each of which processes it solely to deliver its contracted services and under its own privacy policy:

• Stripe, Inc. processes all payments and subscription billing. See Stripe’s privacy policy.
• Supabase manages authentication, database operations, and the storage of account-related data for the App.
• Cloudflare hosts and runs the App, including the dashboard and the chat widget.
• Vercel Inc. hosts squarepaste.com and processes standard request logs. See Vercel’s privacy policy.
• Squarespace, Inc. hosts the templates we transfer to you and receives the email address you used at checkout so we can issue an Administrator invitation. See Squarespace’s privacy policy.
• Google Analytics may be used to gather aggregated insights about traffic and general usage trends in the App.

5. Cookies and Tracking

squarepaste.com does not set first-party tracking or advertising cookies; the only browser storage it uses is the sessionStorage entry described above. Stripe’s checkout components may set their own cookies for fraud prevention, governed by Stripe’s privacy policy. In the App, Google Analytics, if enabled, may set its own cookies under Google’s policies.

6. Data Security

We take commercially reasonable steps to protect the information we store, including encryption, HTTPS across the Site and the App, server-side request validation, least-privilege access to our internal tools, and reputable infrastructure providers. Payment card data never touches our servers; it goes directly from your browser to Stripe.

All chat messages sent through the App are encrypted. Each website is assigned a unique access code that safeguards its messages, so they can only be decrypted and accessed by authorized users through the Squarepaste system. Messages are stored encrypted and decrypted server-side on retrieval, so each website’s messages remain independently protected.

No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

App account information is kept until you delete your account or it is terminated under our Terms of Service. Messages sent through the App are kept for 180 days and then automatically deleted. When an App account is deleted or terminated, all data associated with it, including personal information and stored communications, is permanently removed from our systems.

Order records (your email, the product purchased, the amount, and the Squarespace site URL where applicable) are retained for at least seven (7) years to comply with U.S. tax and accounting requirements. Server logs are retained for up to 90 days. Project files and correspondence for custom engagements are retained for the duration of the engagement plus a reasonable archival period for follow-up support, generally not longer than two (2) years.

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information; to obtain a copy of your data in a portable format; and to object to certain processing. You may also ask us to permanently delete your App account and all associated data. To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We do not discriminate against users who exercise these rights.

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what categories of information we collect, the right to deletion, and the right to opt out of the “sale” of personal information. We do not sell personal information as defined by the CCPA.

9. Children’s Privacy

The Site and the App are not intended for anyone under the age of 13, and we do not knowingly collect personal information from children. If we learn that such information has been collected, we will promptly delete it.

10. International Users

Squarepaste is based in the United States and processes data in the U.S. If you use the Site or the App from outside the U.S., your information will be transferred to, stored in, and processed in the U.S., which may have data-protection laws that differ from those of your country. By using the Site or the App you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. The “Updated” date at the top of this page shows the most recent revision. Material changes will be posted here and, where appropriate, sent by email to active customers. Continued use of the Site or the App after changes are posted constitutes acceptance of the revised policy.

12. Contact

Questions? Email us at [email protected] or write to Squarepaste, 4015 Travis Dr., Ste 211, Nashville, TN 37211.