Who is responsible
Liftpad is operated by Stellaire Web, an enterprise registered in Quebec, Canada (NEQ 2282607243). "We" and "us" mean Stellaire Web. Contact: info@stellaireweb.com.
The person in charge of the protection of personal information is Reza Abtahian. Write to info@stellaireweb.com for any question or request.
What we collect
- Account: your name, email address, a one-way hash of your password, your team and its members.
- Billing: plan, invoices and payment status. Card details are entered on Stripe and never reach our servers; we keep only the card brand and last four digits that Stripe shows us.
- Domains: the contact details a registry requires to register a domain in your name.
- Your sites: the files you upload, their versions, and the messages visitors send through your site's forms.
- Security and abuse prevention: a one-way hash of the network address used for sign-ups, reports and rate limits, and a log of important account actions.
- Visitor statistics for your sites: page, referring site, country and device type, counted at the edge without cookies and without storing visitors' IP addresses.
Why we use it
- To provide the service you asked for: host your sites, send form messages, register domains, run AI work.
- To bill you and meet tax and accounting rules.
- To keep the platform safe: stop spam, scams, fraud and abuse.
- To send you service emails (sign-in links, receipts, alerts, renewal reminders). We send marketing emails only if you agree, and every one has an unsubscribe link.
Who processes it for us
We do not sell or rent personal information. We share it only with the providers that run parts of the service for us, under contracts that protect it:
- Cloudflare (hosting, storage, AI models, email delivery and domain registration). Data may be processed on Cloudflare's network outside Quebec, including in the United States.
- Stripe (payments and invoices).
- GitHub (private, access-controlled disaster-recovery backups).
- Domain registries, which publish or hold registration data under their own rules.
- Authorities, when the law requires it.
AI features
When you use the AI builder or suggestions, the description you give and the page content needed are sent to AI models run on Cloudflare's network. They are used to answer your request, not to train public models. Do not put sensitive personal information in AI requests.
Forms on your sites
For messages that visitors send through your site's forms, you are responsible for that information and we process it on your behalf. Tell your visitors how you use what they send (your own privacy notice).
Cookies
The Liftpad dashboard uses one strictly necessary cookie to keep you signed in. Our website and your sites' statistics use no tracking cookies. Password-protected sites and A/B tests set a technical cookie on that site only.
How long we keep it
We keep your information while your account is open. When you close it, we delete your sites, files and form messages within 30 days, except what the law requires us to keep (for example invoices, kept 6 years for tax purposes). Copies in our private disaster-recovery backups disappear as newer backups replace them. Unconfirmed free sign-ups are deleted after 7 days.
Your rights
You can ask to see the personal information we hold about you, correct it, get a copy in a common format, withdraw a consent or have it deleted. Write to us; we answer within 30 days. If you are not satisfied, you can complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Security
Everything is encrypted in transit (HTTPS), passwords and tokens are stored only as hashes, staff access is limited and logged, and dashboards are protected against cross-site attacks. If a breach could cause you serious harm, we tell you and the authorities as the law requires.