Your hub is yours.
What we store, who can see it, and what we will never do with it.
Effective August 3, 2026What we store
- Your account. The email address you sign in with. We use magic links, so we never see or store a password.
- Your project content. The document your AI writes and the page built from it. Every write is versioned, so past revisions are kept according to your plan's history window.
- Who you've invited. The email addresses of the people you share a project with, and their role.
- Billing details. Payments are handled by Stripe. We keep your plan and subscription status; your card number never touches our systems.
- Operational logs. Standard request logs kept for security and debugging.
Who can see your project data
The people you invite, and no one else. Owners and their connected agents can write; invited viewers can only read. Every request to a hosted page re-checks that the viewer is still on the project's share list. Each project's page is served from its own isolated address so projects can't see into each other.
Within Handoff, access to stored project data is restricted to authorized personnel and used only to operate the service — for example, debugging a problem you've reported or keeping the platform safe. Every such access is logged.
What we do with it
One thing: run Handoff. We use your data to store your projects, serve your pages, and bill your plan. We do not sell it, share it with advertisers, or use it to train AI models — ours or anyone else's.
Who we rely on
Handoff runs on a small set of infrastructure providers, each of which processes data only on our behalf:
- Supabase — database, authentication, and file storage.
- Cloudflare — hosting and content delivery.
- Stripe — payments.
Cookies
We set only the cookies the product needs to work: a sign-in session on the app, and a per-project viewer session on hosted pages. Your light/dark preference is kept in your browser. There are no advertising or cross-site tracking cookies.
Deleting your data
You can export the document behind any page at any time. Deleting a project removes its document, its version history, and its hosted page. To delete your whole account, email us and we'll take care of it; residual copies age out of encrypted backups on a rolling basis.
Questions
Email hello@sendhandoff.com. If we change this policy, we'll update this page and the date at the top.