Privacy Policy
This Privacy Policy explains how Edmunds Studio Limited (“Pagora”, “we”, “us”) collects, uses, shares and protects personal information when you visit trypagora.com or use the Pagora app at app.trypagora.com (together, the “Service”).
In short: we use your information to run Pagora for you, we publish to your social media accounts only when you tell us to, we don’t sell your data, and neither we nor our AI providers use your content to train AI models.
1. Who we are
Pagora is operated by Edmunds Studio Limited, a company incorporated in Hong Kong. We are responsible for the personal information described in this policy (in data protection terms, we are its “controller”).
This policy covers our website and the Pagora app. It does not cover the social media platforms you connect to Pagora; they handle your information under their own privacy policies.
If you have questions, email support@trypagora.com.
2. Information we collect
Account information
When you sign in with Google, Google shares your name, email address and profile picture with us. We never receive your Google password. If you sign in with a link sent to your email instead, we receive the email address you enter. We use this information to create your account, recognise you when you sign in and contact you about the Service.
Connected social media accounts
When you connect a social media account to Pagora, such as a Facebook Page, an Instagram professional account, a Threads profile, a LinkedIn profile or page, or an account on another platform we add support for over time, the platform shares the following with us, limited to the permissions you approve on the platform’s own consent screen:
- an access token, and a refresh token where the platform issues one, that lets Pagora act on that account on your behalf;
- basic account details, such as the account or page ID, name, username, profile picture and the pages or channels you choose to manage; and
- details of the posts Pagora publishes for you, such as the post ID, link and publishing status.
We ask only for the permissions needed to publish the content you approve and to show you which accounts are connected. If we later offer features that need more access, such as post performance insights, we will ask for that access separately and update this policy first. Which platforms are available may change over time.
Content you create with Pagora
This includes the material you give us, such as documents, notes, text, links, numbers, photos and other files, and your instructions; the slides, web pages, social images, captions and drafts Pagora creates for you; and your publishing history.
Usage information
When you use the app, we collect information about how it is used, such as pages viewed, features used, device and browser type, and approximate location derived from your IP address. We use PostHog to analyse this information. On our website (trypagora.com) we record page views only, without cookies or local storage.
Error and diagnostic information
When something goes wrong, we collect technical information to find and fix the problem: error messages, the page or request involved, browser and operating system, time, IP address and, if you are signed in, your account ID. We use Sentry for error monitoring, and our hosting provider keeps server logs.
Payment information
If we introduce paid plans, payments will be processed by Stripe. Stripe collects your payment details directly; we never receive or store your full card number. We store only your Stripe customer ID and your subscription status. Invoices and payment records are kept by Stripe and, where tax and accounting law requires it, by us.
Messages you send us
If you email us, for example for support or to join our early access waitlist, we keep your email address, your message and our reply.
3. How we use information
We use personal information to:
- provide the Service: create and secure your account, store your content and create and revise your work at your request;
- publish to your connected accounts, only after you confirm the post. Pagora never posts, comments, likes, follows or sends messages on your behalf without your confirmation;
- answer your questions and handle your requests;
- keep the Service secure and reliable, including detecting abuse, spam and fraud and fixing errors;
- understand how the Service is used and improve it;
- send you service messages, such as security alerts and notices about changes to our terms, and, if you ask us to, early access updates (you can opt out at any time); and
- comply with the law and enforce our Terms of Service.
We don’t sell your personal information and we don’t use it for targeted advertising. We use data from your connected social media accounts only to provide the features you use in Pagora.
4. AI model providers
To create and revise your work, we send the inputs needed for each request, such as your instructions and the material, text and images you provide, to third-party AI model providers. We currently use Google Gemini, provided by Google LLC through Google’s paid API services.
Under the terms that apply to these paid services, Google does not use your inputs or the generated content to train or improve its models. Providers may keep data for a limited time to detect abuse and comply with the law, as described in their terms.
We do not use your content to train AI models, and we only use AI providers on terms that do not allow them to train on it. We never send your social media access tokens or payment details to AI providers. If we add or change an AI provider, we will update this section.
5. Legal bases for processing (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:
- Contract: to provide the Service you signed up for, including generating content and publishing to the accounts you connect.
- Legitimate interests: to keep the Service secure, prevent abuse, understand usage and improve the Service, where these interests are not overridden by your rights.
- Consent: for optional emails such as early access updates. You can withdraw consent at any time.
- Legal obligation: to keep tax and accounting records and respond to lawful requests.
8. How long we keep information
| Information | How long we keep it |
|---|---|
| Account information | While your account is open; deleted within 30 days after you delete it |
| Access tokens and details of connected accounts | Until you disconnect that account or delete your Pagora account |
| Your content (material you provide, your works and drafts) | Until you delete it or delete your account |
| Product analytics events | Up to 12 months, after which they are deleted or aggregated |
| Error reports | Up to 90 days |
| Server logs | Up to 30 days |
| Encrypted backups | Deleted data can remain in backups for up to 30 days until they are overwritten |
| Emails with our team | Up to 24 months after the conversation ends |
| Early access waitlist | Until we invite you or you ask to be removed |
| Billing and transaction records | As long as tax and accounting law requires, generally 7 years |
See Data Deletion for how to delete your account and data.
9. Your choices and rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct information that is inaccurate or incomplete;
- delete your information;
- receive your information in a portable format;
- object to or restrict certain processing; and
- withdraw consent where we rely on it.
You can disconnect a social media account in the app’s settings at any time, and you can also revoke Pagora’s access from the platform’s own settings. To delete your account, follow the steps on our Data Deletion page.
To exercise any other right, email support@trypagora.com. We will respond within 30 days and may ask you to confirm your identity first. We don’t charge for this, and we won’t treat you differently for exercising your rights.
If you are in the EEA or the UK, you can also complain to your local data protection authority. In Hong Kong, you can contact the Office of the Privacy Commissioner for Personal Data. If you live in California or another US state with a privacy law: we don’t sell your personal information or share it for cross-context behavioural advertising.
10. Security
We encrypt data in transit (HTTPS) and at rest. Access tokens for connected social media accounts are additionally encrypted by our application before they are stored. Access to personal information is limited to people who need it to run the Service.
No system is perfectly secure. If a security incident affects your personal information, we will notify you and the relevant authorities as required by law.
11. International transfers
We are based in Hong Kong, our servers are in the United States, and our service providers may process information in other countries. This means your information may be transferred to and processed in countries other than your own, including Hong Kong and the United States. Where the law requires it, for example for information from the EEA or the UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses in our agreements with service providers.
12. Children
Pagora is a tool for professionals and businesses and is not intended for anyone under 18. We don’t knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
13. Google user data
Pagora’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you sign in with Google, we use your name, email address and profile picture only to create and run your Pagora account. Google’s handling of your information is described in the Google Privacy Policy. You can revoke Pagora’s access to your Google account at any time from your Google Account permissions page.
14. Changes to this policy
We will post any changes on this page and update the version and “Last updated” date above. If a change is significant, we will also tell you by email or in the app before it takes effect.
15. Contact us
For privacy questions or requests, email support@trypagora.com or see our Contact page.
16. Governing law
This policy is governed by the laws of the Hong Kong Special Administrative Region. This does not take away any protection you have under the mandatory data protection laws of the country where you live.