Privacy Policy
Last updated 22 October 2026
This explains what personal data Afterpage collects, why, and what you can do about it. It's written to follow Malaysia's Personal Data Protection Act 2010. Questions or requests: contact@afterpage.co.
What we collect
Your account: your email address, and if you sign in with Google, your name and profile picture.
Your subscription: your plan and payment status. Card details are handled by Stripe; we never see or store your full card number.
What you give us: searches you run, links you paste, edits you make, and photos you upload.
Technical data: your IP address and approximate country, used to prevent abuse, apply daily limits and show prices in your currency.
Enquiries: when someone uses the contact form on a website we host, we store their message and send it to that business. The business decides how to use it.
Public business information: to build a website, we gather information that businesses have made public, such as their website, Google listing, reviews and social media posts. This can include names of staff or reviewers where the business has published them.
Why we use it
To provide the service: building, hosting and editing websites, signing you in, and sending you the emails the service needs (sign-in codes, links to your previews, enquiries).
To take payments and manage subscriptions.
To keep Afterpage secure and prevent abuse.
To contact businesses about a website we've designed for them. If you'd rather we didn't, tell us and we won't contact you again.
Who we share it with
We use trusted providers to run Afterpage, and they only process data on our behalf: Cloudflare (hosting, storage and security checks), Stripe (payments), Resend (email), Google (sign-in and business listings), OpenRouter and the AI model providers it connects to (writing and images), Apify (collecting public business information) and Unsplash (stock photos).
Some of these providers are outside Malaysia, so your data may be processed in other countries, including the United States. We only use providers with appropriate safeguards.
We don't sell your personal data.
Cookies
We use a small number of cookies that the service needs to work: one to keep you signed in, one to complete Google sign-in safely, and one to remember the currency you chose. We don't use advertising or tracking cookies.
How long we keep it
Account data is kept while you have an account. Free previews and their files are deleted after they expire. Payment records are kept as long as the law requires. You can ask us to delete your account at any time.
Your rights
You can ask to see the personal data we hold about you, correct it, or have it deleted, and you can withdraw consent to marketing at any time. Email contact@afterpage.co and we'll reply within 21 days.
If you're a business owner and want a preview of your business removed, or don't want to hear from us, just email us.
Security
Data is encrypted in transit, sign-in uses one-time codes or Google, and access to our systems is restricted. No system is perfectly secure, but we take reasonable steps to protect your data.
Changes
We'll update this policy as Afterpage changes, and tell you about significant changes by email or in your dashboard.