Privacy Policy — Raccoon Page

1. Introduction

This Privacy Policy describes how Raccoon Page collects, uses, and protects your personal information when you use our service.

2. Information We Collect

We collect information you provide (such as name, email, workspace content, and support communications), operational usage data, and technical data such as IP address, browser type, and device information.

With explicit analytics consent, Google Analytics collects pseudonymous public marketing-site interaction data such as landing pages, traffic source, sessions, approximate location, device/browser information, and signup CTA interactions. Google Analytics is not loaded in the product application.

With the same consent, PostHog collects product application events such as signup, organization and page creation, completed imports, and subscription starts. PostHog session replay may record interface structure and interactions, but all rendered text and input values are masked by client configuration.

We also retain bounded first-touch acquisition attribution: source, medium, campaign, content, term, landing path, referrer hostname, CTA surface/path, and first-touch time. We do not store full referrer URLs, arbitrary landing query strings, IP addresses, document content, or inferred search queries in acquisition attribution.

For paid plans, Stripe processes payment details; we store subscription status and plan type, not payment card details.

3. How We Use Your Information

We use account and workspace information to provide, secure, support, and bill for the service. If you grant analytics consent, we use Google Analytics on the public marketing site to understand landing-page and CTA performance, PostHog in the product application to understand onboarding, activation, reliability, and feature use, and first-party attribution to measure how acquisition sources relate to activation and subscriptions.

Server-side product analytics checks the latest persisted analytics consent before sending a user event. Operational account, activation, subscription, and revenue totals remain first-party service records and do not depend on analytics consent.

We process data based on contract performance (providing the service), legitimate interests (security, fraud prevention, and essential service improvement), consent (optional analytics and optional marketing communications), and legal obligations (compliance). Optional Google Analytics, PostHog, session replay, and acquisition attribution processing relies on your explicit analytics choice and is denied by default.

We share data only with service providers used to operate or measure the service. These include DigitalOcean (hosting), Stripe (payments), Sentry (error monitoring), Resend (transactional email), Google Analytics (consented public marketing analytics), and PostHog (consented product analytics and privacy-masked session replay). We do not sell personal data or permit these providers to use Raccoon Page customer data for their own advertising. See our Subprocessor List for the complete and current list.

6. Artificial Intelligence

We do not use your content, documents, or personal data to train artificial intelligence or machine learning models. Your data is used solely to provide and improve the Raccoon Page service as described in this policy.

7. Google Docs Import

When you choose Import Google Doc, Google provides contextual, read-only access for that import. We use this access to copy only the Google Doc URL you submit, including the linked or default document tab and supported images, into a new Raccoon Page page. The copied page content and attachments are stored as ordinary Raccoon Page content under this policy until you delete them or your account.

We do not retain your Google authorization code, access token, refresh token, submitted source URL, or Google account connection. We do not list your Google Drive or synchronize with Google Docs.

Raccoon Page's use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. International Transfers

Data may be transferred internationally. We use Standard Contractual Clauses and other appropriate safeguards for transfers outside the EEA.

9. Data Retention

We retain account and workspace data while your account remains active. First-touch acquisition attribution is retained while the attributed account remains active and is deleted with that account. Provider-held Google Analytics and PostHog data follows the retention settings configured in those services; revoking consent stops future analytics collection but does not automatically erase analytics already collected. You may request access or deletion through the Privacy Center.

After account deletion, personal data is removed from active systems within 30 days and backup copies are purged within 90 days. Business-plan audit logs are retained for 2 years, and data required for legal obligations may be retained as required by law.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, port, restrict processing of, or object to processing of your data. Submit requests via our Privacy Center inside the app. We do not make automated decisions about you, including profiling, that produce legal or similarly significant effects.

11. CCPA Disclosures

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA/CPRA). Categories of personal information we collect include identifiers (name, email), commercial information (subscription status), internet activity (usage logs, IP address), and user-generated content. We collect this information for the business purposes described in this policy. You have the right to know what personal information we collect, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell your personal information. We will not discriminate against you for exercising your CCPA rights.

12. Cookies

Essential storage supports authentication, security, and your consent preference. Optional analytics storage is denied by default and activates Google Analytics only on the public marketing site and PostHog only in the product application after explicit consent. You can change or revoke that choice at any time. See our Cookie Policy for provider-specific storage, attribution, and controls.

13. Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments.

14. Contact

For privacy inquiries, contact our Data Protection Officer at privacy@raccoonpage.com. For DMCA and copyright matters, contact our designated agent at legal@raccoonpage.com.