Short answer
Your data is stored on Google Cloud in the United States, and every connection to DemoPage is encrypted with TLS. Your account and demo recordings are kept while your account is active and deleted when you ask; other records are removed on a schedule, and backups roll off within 30 days. Nothing you or your visitors send is used to train AI models.
How long each record is kept
- Account data: while your account is active, and deleted when you ask.
- Demo sessions and recordings: while your account is active, up to the latest 1,000 sessions across DemoPage plus each link's 20 latest and the recording it shows, and deleted when you ask.
- Leads and questions: each demo link keeps its latest 200 leads and 60 questions.
- Recap links stop working after 30 days, and recording links when they expire, after 1 to 90 days.
- Mail sent to a DemoPage login's address: 14 days.
- A saved signed-in session to your sandbox: 24 hours.
- Visit counts used for limits: 7 days.
- A connected AI tool: it ends after 30 days without use, or at once when you disconnect it or reset your password.
- Backups: hourly database backups for 30 days, and disk snapshots for 14 days.
The [Privacy Policy](/privacy#retention) has the full list.
Who processes it
Google Cloud hosts DemoPage and its backups in the United States. Anthropic, OpenAI, PyAI, and TypeSafe run the AI features, and Resend delivers email. Slack gets alerts only if you connect it, and tools you connect, such as a webhook or an AI tool, get what you send them. For the current list, email legal@demopage.io.
Your visitors' data
- Their questions are kept as text. Voice clips are transcribed and then discarded.
- Limits count visitors by a salted hash of their network address; the address itself isn't stored.
- Demo pages set no cookies, and DemoPage uses no advertising cookies or third-party analytics.
- When a visitor asks what you hold, see What to do when a visitor asks for their data.
Moving data out of Europe
Personal data from the EEA, the UK, and Switzerland moves to the United States under the European Commission's Standard Contractual Clauses, with the UK Addendum for the UK. Our EU representative under Article 27 of the GDPR is IT Governance Europe Limited, at eurep@itgovernance.eu. Hosting outside the United States isn't available yet. SSO, audit export, and data residency
Data to keep out of a demo
Protected health information, payment card data, and government ID numbers. Use a sandbox with sample data instead.
Related questions
Didn't answer your question?
Talk to us with your demo link and the email you signed up with, or write to hello@demopage.io. We'll answer, and add it to the Help Center.