Blank Pages ("we", "us") builds and operates the site at blankpages.app and the AI-receptionist services we sell from it. This policy explains what personal data we collect, how long we keep it, who we share it with, and what rights you have over it.
If you only want the short version: we collect the contact information you submit through forms, basic request logs from our hosting provider, and the cookies listed in our Cookie Policy. We do not sell personal data. You can request a copy or deletion of your data at any time by emailing lester@blankpages.app.
Blank Pages is a design and AI-services studio operated by Blank Pages Technologies LLC, a Georgia limited liability company at 8735 Dunwoody Place Ste N, Atlanta, GA 30350, United States. References in this policy to "we" or "Blank Pages" mean that company, which is also the data controller for the purposes of GDPR.
We do not request or use:
| Data | Retained for | Stored where |
|---|---|---|
| Contact / onboarding form submissions | 3 years from submission, then purged | Resend (email logs, 30 days then archived); Supabase (full retention) |
| Account email + auth state | While the account is active, plus 90 days after deletion request | Supabase Auth |
| Stripe payment confirmations | 7 years (US tax compliance) | Stripe + our records |
| Vercel request logs | 30 days on Vercel Hobby tier | Vercel |
| Vercel Analytics aggregates | Indefinite (no identifying data) | Vercel |
| Sentry error reports | 90 days, then auto-purged | Sentry |
| Resend email delivery logs | 30 days of recipient + subject; full body not retained after delivery | Resend |
We do not use your data for behavioural advertising, do not build advertising profiles, and do not sell or rent your data to anyone.
We share personal data only with the following processors, each under contract and only for the purposes listed:
| Processor | Purpose | Data shared |
|---|---|---|
| Vercel (USA) | Web hosting, request logging, optional analytics | IP, user-agent, request metadata |
| Supabase (USA) | Authentication and client-portal database | Account email, client portal records |
| Resend (USA) | Transactional email delivery | Recipient email, subject, body |
| Google LLC (USA) | Web fonts (Google Fonts) loaded on each page | IP address, user-agent |
| Flagpedia / flagcdn (EU) | Country-flag images in the AI receptionist demo | IP address |
| Microlink (EU) | Website screenshot previews in the portfolio section | IP address, the public URL being previewed |
| Stripe (USA) | Payment processing | Email used at checkout, purchase metadata |
| Sentry (USA, if enabled) | Browser error reporting | Sanitized stack traces, session ID |
| ElevenLabs (USA) | AI voice generation (build-time only — no end-user data sent) | None at runtime; scripted demo lines only at build |
| Pexels (USA / EU) | Stock imagery used on the site | None — embed only, no user data forwarded |
| Twilio (USA) | Sending and receiving text messages and calls for the programs described in section 6 | Mobile number, message content, delivery status |
| Google Workspace (USA) | Inbound email at hello@blankpages.app | Anything you email us |
We may also disclose data when required by law, in response to a valid legal process, or to protect our rights or the safety of our users.
We operate text-message programs for specific services. Each program, what it sends, and how often, is described on our SMS Terms page.
We only text people who opted in. Depending on the program, that means you gave your mobile number on a call to a business line we operate and agreed to be contacted by text, or you entered your mobile number when booking through a scheduling form. We do not buy or rent phone lists.
We do not sell your information. We do not share your mobile number, or your consent to receive text messages, with third parties or affiliates for their own marketing purposes. The only company that handles your number for messaging is our carrier, Twilio, and only to deliver the messages you asked for.
Reply STOP to any message to opt out, or HELP for help. Message and data rates may apply. Opting out of texts does not delete the rest of your record; to request deletion, see section 8.
Our processors are based primarily in the United States. If you access the site from the European Economic Area, the United Kingdom, or another region with data-export restrictions, your data is transferred to the US under the relevant Standard Contractual Clauses (SCCs) maintained by each processor.
Under GDPR (EU/UK), CCPA / CPRA (California), and similar regimes elsewhere, you have rights including:
To exercise any right, email lester@blankpages.app from the address on file. We respond within 30 days.
All site traffic is served over HTTPS. Forms post to TLS-protected endpoints. Authentication is handled by Supabase Auth with industry-standard hashing. Payments are handled by Stripe (PCI-DSS Level 1). We do not store payment card data on our servers. No system is ever 100% secure; we follow reasonable safeguards and notify you without undue delay if a breach affects your personal data.
We may update this policy when our practices change. Material changes will be flagged at the top of the page with a new "Last updated" date and, for users with accounts, by email. Continuing to use the site after a change means you accept the new policy.
Questions, requests, or complaints: lester@blankpages.app.