Privacy policy

1. Who we are

Flagstage (“Flagstage,” “we,” “us”) provides a managed website service: we import an existing website, host it, and make updates on the owner's behalf. This policy explains what information we collect when you visit our marketing site, use our service, or communicate with us — and what we do with it.

2. Information we collect

We collect three kinds of information:

• Account information. When you sign up: your name, email address, business name, and the web address of the site you ask us to manage. Payment details are collected and processed by our payment provider, Stripe; we do not store full card numbers on our systems.
• Service content. The website files we import and manage for you, the change requests you send us, and the previews and versions we produce while doing the work. This content belongs to you.
• Usage and technical information. Standard server logs (IP address, browser type, pages requested, timestamps) needed to operate the service securely and diagnose problems.

Our marketing site's guided walkthrough runs entirely in your browser. The website address you type there is used to personalize the walkthrough on your screen and is passed along only if you continue to sign-up.

3. How we use information

• To provide the service: hosting your site, making requested changes, producing previews, and generating downloadable copies of your site.
• To communicate with you about your requests, your account, and your billing.
• To operate, secure, and improve our systems, including preventing abuse.
• To meet legal and tax obligations.

We may use software tools, including AI-assisted tools, to help carry out the changes you request. These tools operate on your instructions and your site content in order to do the work you asked for; a change still requires your approval before it goes live.

4. What we do not do

• We do not sell your personal information.
• We do not rent your contact details to advertisers.
• We do not claim ownership of your website content — it is yours.

5. Sharing

We share information only with service providers that help us run Flagstage — such as cloud hosting infrastructure and Stripe for payments — under agreements that limit their use of it, or when the law requires it. If Flagstage is ever involved in a merger or sale, your information would transfer under the same protections as this policy.

6. Cookies

Our marketing site uses only the cookies needed for it to function. Our customer account application uses cookies to keep you signed in. We do not run third-party advertising cookies on either.

7. Retention and deletion

We keep account information while your account is active and for as long as needed to meet legal obligations afterward. Website snapshots and exports follow our published retention behavior in the service. If you close your account, you can download a complete copy of your site first — and you should; that's the point of it.

8. Security

We protect information with industry-standard measures: encrypted connections, access controls, audit logging, and approval-gated changes to customer sites. No system is perfectly secure, but we build ours so that mistakes are visible and reversible.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Email us and we will honor these requests as the law requires — and, frankly, as common decency requires.

10. Children

Flagstage is a business service and is not directed at children under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

If we make meaningful changes, we will update the date at the top of this page and, for significant changes, notify account holders by email.

12. Contact

Questions about privacy? Write to legal@flagstage.com. A person will answer.