Privacy Policy
M-PaX Marketing. Effective Date: October 16, 2026.
M-PaX Marketing ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information, including through our website and our ProductSage platform.
Information We Collect
We may collect the following types of information.
- Personal information. Your name, email address, company name, and user profile details.
- Technical data. Your IP address, browser type, operating system, and usage patterns.
- Analytics data. Measurements from Google Analytics 4, as described under Cookies.
- Activity records. A log of sign ins, refused requests, and record changes in ProductSage, with the origin address.
- Content data. The records you create in ProductSage, such as your products and Projects, and the links to your documents, along with form entries you submit. Your documents stay in your own Google Drive. ProductSage stores the link and the status, not the document.
- Contributions. If you use the contribution form, your name, email address, optional organization, and the text you submit. We store only a one-way hash of the confirmation link we email you, never the link itself. For a published contributor, we also hold the public collaborator profile.
How We Use Your Information
We use your information to:
- Provide and maintain our services.
- Authenticate you with your email address and password.
- Create, process, and store the records you produce.
- Review and publish contributions, and credit the people who make them.
- Measure how the site and the platform are used, and improve them.
- Communicate with you about support, updates, and changes to our policies.
We do not sell or rent your personal information. The work you create stays in your own accounts.
Cookies
ProductSage sets one cookie, a session cookie that keeps you signed in. It is HttpOnly, Secure, and SameSite Lax. Your screen preferences are kept in our database, not in a cookie.
The Contact and Contribute forms on mpaxmarketing.com set one session cookie. It lasts until you close your browser. It is HttpOnly, Secure, and SameSite Lax. It holds only a timing token that helps us tell people from bots.
Google Analytics 4 sets its own cookies in your browser. It runs on the public pages of mpaxmarketing.com and on five ProductSage pages you see before you sign in. Those pages are Sign in, Sign up, Email verification, Password recovery, and Password reset. No analytics tag loads after you sign in.
The Google Analytics cookies are first-party cookies. They include _ga, which distinguishes users, and _ga_ followed by an identifier, which persists session state. Google lists a default life of two years for each.
Google states that Analytics collects the number of users, session statistics, approximate geolocation, and browser and device information. We also send the address of the page you view and the page you came from. On mpaxmarketing.com, the address includes any query string. On the ProductSage pages, we remove the query string and fragment before anything is sent. Google states that Analytics does not log or store IP addresses.
You can block or delete these cookies in your browser settings.
Data Security
We use industry-standard measures to protect your data, including encryption, password protection, and restricted access. We do our best to secure your data, but no method of transmission over the Internet is completely secure.
Data Sharing and Disclosure
We may share data:
- With trusted service providers who support our operations.
- With Google, which provides Google Analytics, as described under Cookies.
- With Brevo, which sends our email and receives the recipient's name and email address.
- When legally required, such as in response to a subpoena or a law enforcement request.
- With your explicit consent.
Data Retention
- We deactivate ProductSage accounts and users. We do not delete them. We keep the record of a deactivated account.
- We keep a published contribution, with your name, for as long as the template stays published. We remove it on request. We cannot recall copies that others have already taken.
- For a contribution we do not publish, we delete your name and email address 12 months after we decide.
- If you never use the confirmation link, we delete the submission, including your name and email address, within 60 days after you send it.
Your Rights Over Your Data
You may request:
- An exported file of the personal data we hold about you.
- That we correct or delete your data, where legally permissible.
To make a request, contact us using the information below.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will appear on this page with a new effective date. When this policy or the Terms of Use changes, we email the Administrator of each active ProductSage account. Continued use of our services after a change means you accept the updated policy.
Contact Us
If you have any questions about this Privacy Policy, contact us through the contact form.