Privacy Policy
Last updated: December 13, 2025
PAJO ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
What We Collect
Contact Form Data
When you submit our contact form, we collect:
- Your name
- Your email address
- Your message content
- IP address (for spam prevention)
- UTM parameters (if you arrived via a marketing campaign)
Retention: Contact form submissions are retained for 30 days in our email system, then deleted.
Analytics (Google Analytics 4)
We use Google Analytics 4 to understand how visitors use our site. This collects:
- Pages you visit
- Time spent on site
- Browser and device type
- Geographic location (city-level)
- Referring website
Note: Google Analytics uses cookies. You can opt out using browser extensions like uBlock Origin or by enabling "Do Not Track" in your browser.
What We Do NOT Collect
- Payment information (we don't process payments on this site)
- Passwords (we have no login system)
- Social security numbers or government IDs
- Precise geolocation data
How We Use Your Data
Contact Form Submissions
We use your contact information solely to respond to your inquiry. We do not sell, rent, or share your email address with third parties for marketing purposes.
Analytics
We use analytics to improve our website and understand which content is most useful. This helps us serve you better.
Spam Prevention
We use IP-based rate limiting (3 submissions per hour) to prevent abuse of our contact form. IP addresses are not stored beyond temporary rate limit checks.
AI Access & Customer Websites
For customers who use our managed website service:
What AI Can Access:
- Page content (text, images, layout)
- Analytics data (page views, bounce rates)
- Performance metrics (load time, Core Web Vitals)
- Public website structure
What AI Cannot Access:
- Customer databases (user accounts, orders)
- Payment information
- Passwords or authentication credentials
- Private customer data
- Email inboxes
Retention: AI analysis data is retained for 30 days for quality monitoring, then deleted.
Third-Party Services
Email (Resend)
Contact form submissions are sent via Resend (resend.com). See their privacy policy at resend.com/legal/privacy-policy
Hosting (Cloudflare)
Our website is hosted on Cloudflare Pages. See their privacy policy at cloudflare.com/privacypolicy
Analytics (Google)
We use Google Analytics 4. See Google's privacy policy at policies.google.com/privacy
Your Rights
You have the right to:
- Access: Request a copy of data we hold about you
- Deletion: Request we delete your data (excluding legally required records)
- Correction: Request we correct inaccurate data
- Opt-out: Unsubscribe from marketing emails (we don't send unsolicited emails anyway)
To exercise these rights, email us at [email protected]
Data Security
We protect your data using:
- HTTPS encryption for all data in transit
- Least-privilege access controls
- Regular security audits
- Hosting on Cloudflare's SOC 2 Type II certified infrastructure
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect data from children. If you believe we've collected data from a child, contact us immediately at [email protected]
Changes to This Policy
We may update this policy occasionally. Significant changes will be announced on our homepage. Continued use of our site after changes constitutes acceptance.
Questions?
If you have questions about this privacy policy or how we handle your data, contact us:
Email: [email protected]
Response time: Within 48 hours