Bankpage policiesWho this policy covers
NOCOMP FZCO is responsible for the account and service information it uses to operate Bankpage. If you use Bankpage to publish a merchant website or process information about your customers, directors or business contacts, you are responsible for the purposes for which you collect that information and the notices and permissions required for your business. Visitors to an independently operated merchant website should also read that merchant’s privacy policy.
Information the service handles
- Account details: your email address, username, Telegram handle, authentication information, account role and account identifiers.
- Workspace content: the company and contact details, director profiles, addresses, website content, images, document inputs, generated files and other records you provide or create.
- Connected-service data: integration configuration, API credentials, domain requests and the input and output needed for the provider action you request.
- Merchant operations: order, inquiry, subscription and import records handled through the features you use. These may contain customer contact and transaction information.
- Service and security records: request information, IP addresses, operational status, errors, account activity and records of administrator access.
- Correspondence: information you give us when seeking support or raising a privacy or account concern.
Why information is used
Information is used to create and authenticate accounts, save and retrieve work, generate requested content, publish websites, operate integrations, answer requests, investigate errors, protect access and meet applicable legal obligations. Public website content is shared with visitors when you publish it.
Processing must have a basis permitted by the law that applies, such as carrying out your requested service, fulfilling a legal obligation or your consent where required. Creating an account does not grant permission for unrelated advertising. Do not include personal information in a prompt or generated document unless it is needed and you have authority to use it for that purpose.
Service providers and other recipients
Bankpage uses Supabase for authentication, database records and file storage. Hosting and infrastructure providers process the traffic and data needed to run the service. Authorized administrators can access account information for administration and support; the platform records administrator sign-in-as activity.
When a workflow uses a connected AI, image, domain, commerce or payment provider, relevant inputs are sent to that provider. Depending on your configuration, theseservices can include 
, 
, 
, domain registrars, 
and 
. Check the selected provider’s own terms and privacy information before sending personal or confidential data. This policy does not promise that every external provider uses the same retention or model-training settings.
Information may also be disclosed where required by law or necessary to respond to a valid legal request, protect rights or investigate misuse. Publication, sharing and exports you initiate can make information available outside your account.
International processing
Connected providers and infrastructure may process information in countries other than the United Arab Emirates. Bankpage does not promise that all data stays in the UAE. Applicable restrictions on international transfers still apply. Contact us for information about the providers and transfer arrangements relevant to your use before submitting data subject to specific residency requirements.
Storage, access and retention
Workspace records and generated documents are stored so you can return to them. Account permissions control access, and stored integration secrets are encrypted by the application. Browser storage also keeps sign-in state and certain interface preferences; see Cookies & browser storage.
Retention depends on the record, the service it supports and any legal or security need to preserve it. There is no single automatic deletion period for all Bankpage data. Use available deletion controls or contact us about account closure and deletion. Removing a live record does not necessarily remove every backup, audit record, downloaded copy or copy held by a provider at the same time.
No online system is risk-free. Protect your devices and credentials, limit the information you upload and revoke exposed API keys. Contact account support promptly if you believe your account or personal information has been compromised.
Your choices and privacy requests
Depending on the law that applies, you may have rights to obtain information about processing, access or correct your data, request deletion, restrict or stop processing, or receive a portable copy. Where processing relies on consent, you may withdraw it; this does not undo processing that was lawful before withdrawal. Rights can be subject to legal conditions and exceptions.
Tell us what information or activity your request concerns. We may need to verify your identity and authority before responding. If a request concerns information controlled by a merchant using Bankpage, contact that merchant first; we can help identify the appropriate route where possible. You may also raise a concern with the competent data-protection authority.
Use the support channel provided with your Bankpage account, or write to NOCOMP FZCO at IFZA Business Park, DDP, Premises Number 43483-001, Dubai Silicon Oasis, Dubai, United Arab Emirates. Include your account identifier and enough detail for us to understand the request. Do not send passwords, API secrets or full payment-card details.
This policy will be updated when the service’s data practices change. The date above identifies the current version.