Who holds your data

DragGo Technologies, Skardu, Gilgit-Baltistan, Pakistan, is the controller of the personal data described here. Questions, requests and complaints all go to support@draggo.co.

What we store

Your account — email address, a one-way hash of your password (never the password itself), and the sessions that keep you signed in.
Your work — projects, pages, uploaded images and files, and the sites you publish.
Your billing record — which plan you are on, when it renews, credits used and bought. Not your card. See below.
Form submissions from sites you publish, so you can read them.
Operational logs — errors, and a record of payment events received, kept so a failed payment can be traced.

Your card never reaches us

Payments are taken by Paddle.com Market Limited, which acts as the merchant of record. Your card number, expiry and security code go to Paddle and never touch a DragGo server. We receive the fact that a payment succeeded, what it was for, and a customer id — nothing that could be used to charge you.

What leaves DragGo, and why

We do not sell data and we do not share it for advertising. It goes to exactly these, and only to do a job you asked for:

Paddle — to take a payment and issue a receipt.
AI model providers — a prompt you type into the AI Agent, and the content of the page it is working on, are sent to the model that answers it, which is run by a third party. That is how the feature works, and it is worth knowing before you paste something confidential into it. We send no account details with it beyond what the request needs.
Our hosting and email providers — to run the servers and send the emails you expect, such as a sign-in code or a renewal notice.
Nobody else, unless the law requires it.

Sites you publish are public

A published site is on the open internet — that is the point of it. Anything you put on one, including anything personal, can be read by anyone and indexed by search engines. If your site collects information from its visitors, you are the controller of that information and you need your own privacy notice for it.

Cookies

DragGo sets the cookies it needs to work: one that keeps you signed in, and one that remembers whether you chose light or dark. There is no advertising cookie and no third-party tracker following you between sites.

How long we keep things

Your account and work — for as long as the account exists.
After you delete the account — removed from our systems within 30 days, and from backups within 90.
Billing records — kept as long as tax law requires, which is longer than the rest and is not ours to shorten.
Logs — 90 days.

Your rights

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it, and we will do it within 30 days. Most of it you can do yourself: your projects export from the editor, and the account settings screen closes the account.

Deleting an account deletes the sites it published. If a site matters to you, export it first — we cannot bring one back afterwards, which is a deliberate part of deleting meaning deleted.

Children

DragGo is not for children under 13, and we do not knowingly hold their data. If you believe a child has an account, tell us and we will remove it.

Changes

If we change what we collect, where it goes or how long we keep it, we will update this page and email account holders before it takes effect.

Contact

DragGo Technologies, Skardu, Gilgit-Baltistan, Pakistan
support@draggo.co

Privacy Notice