packsSign in

Privacy policy

Last updated 11 November 2026. Version 3.

1. Who we are

Packs (packs.co) is run by Longbourne Ltd, a company registered in England and Wales with company number 13753223.

In this policy, "we", "us" and "Packs" mean Longbourne Ltd. You can contact us about privacy at privacy@packs.co.

2. Who this policy covers

Packs lets people put files, links and notes on one page (a "pack") and share it with others. This policy covers two groups of people:

  • Account holders: people who sign up to make and send packs. We decide how your account information is used, so we are the controller of it.

  • Readers: people who open a pack someone has sent them. The person or business that sent the pack decides whether to ask for your email address and what to do with the reading information we record for them. For that information they are the controller and we act as their processor. Section 6 explains this in more detail.

3. Information we collect about account holders

  • Account details: your email address, name and company, and a password if you choose one. Passwords are stored by our sign-in provider in a scrambled (hashed) form. We can't read them.

  • Google or LinkedIn sign-in: if you sign in this way, we receive your name, email address and a link to your profile picture from that service. We don't receive your password or your contacts.

  • Sign-up answers: what you plan to use Packs for and how you heard about us, if you tell us.

  • How you found us: the website that sent you to us, the first page you landed on and any campaign tags in the link (for example utm_source). We use this to see which marketing works.

  • Your content: the packs you make and everything in them, such as files, images, links, text, cover photos, branding, logos and colours. It also includes summaries and captions that our AI features write for you.

  • Billing details: our payment provider, Stripe, collects your card details. We never see or store your full card number. We keep your plan, billing status, renewal date and your customer number at Stripe.

  • Team details: the team you belong to, your role, and the email addresses you invite to join your team.

  • Emails we send you: which emails we sent, whether they were delivered and your email preferences.

  • Support and admin records: messages you send us, and a log of any change our staff make to your account (for example extending a trial).

4. Information we collect about readers

When you open a pack, we record:

  • your email address, but only if the sender asked for it before you could open the pack, or if you gave it to us

  • when you opened the pack and roughly how long you spent on it

  • which items you opened, played or downloaded

  • questions you type into "Ask this pack", and the answers

  • whether the visit came from an automated tool, such as a link preview or an AI assistant, so the sender's figures only count people

  • anything you enter in a form in a pack, such as your name, email address, company, job title, phone number, message and answers to the sender’s questions

We don’t store your IP address or device details with these records. Our hosting providers keep short-lived server logs, which include IP addresses, to keep the service running and secure. These logs are deleted within a few days.

If you report a pack to us, we keep your report and, if you give it, your email address.

5. How we use account holders' information, and our legal reasons

  • To run your account and provide Packs: storing your packs, showing them to the people you share them with, sending you reading alerts, running AI features and managing teams. Legal reason: performing our contract with you.

  • To take payment: legal reason: performing our contract with you, and keeping tax and accounting records because the law requires it.

  • To send service emails: such as reading alerts, payment problems, trial reminders and team changes. Legal reason: performing our contract with you. You can turn off reading alerts in Account, Notifications.

  • To send a few tips while you get started: legal reason: our legitimate interest in helping you get value from Packs. Every tips email has an unsubscribe link.

  • To keep Packs safe: preventing fraud, spam and misuse, and acting on reports. Legal reason: our legitimate interest in protecting Packs, our customers and readers.

  • To improve Packs: looking at how features are used and where sign-ups come from. Legal reason: our legitimate interest in running and growing our business.

We don't sell personal information, and we don't use it for advertising.

6. Readers' information: the sender is in charge

A pack's sender sees who opened their pack and what they looked at. That is the main reason people use Packs. The sender is responsible for having a lawful reason to collect and use this information, and for telling readers about it where the law requires. We process it only to provide Packs to the sender, under our Terms, which include our data processing terms.

If you are a reader and want to see, correct or delete information about you, please contact the person or business that sent you the pack. If you can't reach them, contact us and we will help.

We also use readers' information ourselves in a limited way: to keep Packs secure, to stop abuse and to deal with reports. For this we are the controller, and our legal reason is our legitimate interest in keeping Packs safe.

Forms in packs

A sender can add a form to their pack, for example to register interest or ask for a call. Each form tells you who your details will go to. When you fill one in, your details go to the sender, who may use them to contact you about the pack.

The sender is the controller of these details. They decide how to use them and how long to keep them, and they are responsible for having a lawful reason to do so. We store the details for the sender as their processor. We show them in the sender’s account and email them to the sender. If you give your email address, we also link it to your visit, so the sender can see which parts of the pack you looked at.

To see, correct or delete details you sent through a form, contact the sender. If you can’t reach them, email privacy@packs.co and we will help.

We limit how many replies a form accepts in a short time, and we discard replies sent by automated tools, to protect senders from spam.

7. AI features

Some features use artificial intelligence. They suggest summaries and captions, read booking confirmations to add travel details, and answer readers' questions in "Ask this pack". To do this, we send the relevant pack content, and readers' questions, to our AI provider, Anthropic. Under its commercial terms, Anthropic doesn't use this information to train its models.

Every AI feature is optional. A pack's sender can switch off "Ask this pack" for any pack.

8. Who we share information with

We use these service providers to run Packs. They process information for us under contracts that protect it.

  • Supabase: database, file storage and sign-in. Your data is stored in London.

  • Vercel: hosts the website and app.

  • Stripe: payments and invoices.

  • Resend: sends our emails.

  • Anthropic: AI features, as described in section 7.

Some content in a pack loads straight from another company's servers, so your browser connects to them when you open the pack:

  • Unsplash: cover photos chosen from Unsplash.

  • Embedded services: videos, maps, calendars, forms and documents the sender adds, for example YouTube, Vimeo, Loom, Google Maps, Calendly, Typeform, Figma or Miro. These services have their own privacy policies. We show YouTube videos in its privacy-enhanced mode.

  • Google and LinkedIn: only if you choose to sign in with them.

We may also share information if the law requires it, to protect people from harm, or as part of a sale or merger of our business, in which case the buyer would have to keep it to this policy.

9. Information sent outside the UK

Your account and pack data is stored in the UK. Some of our providers (Vercel, Stripe, Resend and Anthropic) are based in the United States or process data there. When information leaves the UK, we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and on the UK International Data Transfer Addendum in our contract with each provider.

10. How long we keep information

  • Your account and packs: while your account is open. When you close your account we delete your packs, files and reading records within 30 days, and from backups within a further 7 days.

  • Reading records: for as long as the pack exists. Deleting a pack deletes its reading records.

  • Billing records: six years, because UK tax law requires it.

  • Email logs: 24 months.

  • Form replies: until the sender deletes them, deletes the pack or closes their account.

  • Team invitations: they stop working after 30 days, and we delete them when accepted, declined or cancelled, or after 90 days.

  • The earlier version of Packs: if you had an account on the earlier Packs service, we kept your email address and basic account details (such as your sign-up date and whether you unsubscribed) so we can honour unsubscribes and invite you to the new service.

11. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of your information

  • ask us to correct it

  • ask us to delete it

  • ask us to limit how we use it, or object to how we use it

  • ask for your information in a format you can move to another service

Email privacy@packs.co and we will reply within one month. You can change your name, company and email preferences yourself in Account.

If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd be grateful for the chance to put things right first.

12. Cookies

We only use cookies that Packs needs to work. We don't use advertising or tracking cookies.

  • Sign-in cookies: keep you signed in.

  • pk_src: remembers which website or campaign first brought you to Packs, so we can record it if you sign up. It lasts 30 days.

  • pk_last_login: remembers how you last signed in on this browser, with your email address partly hidden, so the sign-in page can show it. It lasts 400 days.

  • Pack cookies: when you open a pack, remember your visit and the email address you entered, so you don't have to enter it again. If a pack has a password, this cookie remembers that you entered it. They last 30 days.

Your browser also stores a few settings on your device, such as how you like your packs listed. These never leave your device.

13. Security

We protect information with encryption in transit and at rest, access controls that keep each account's content separate, and strict limits on staff access. Packs can be protected with an email gate, a password or an expiry date. No system is perfectly secure. If a breach affects your information, we will tell you and the ICO as the law requires.

14. Children

Packs is a business tool for people aged 18 or over. We don't knowingly collect information from children.

15. Changes to this policy

We will update this policy when we change how we use information. The date at the top shows when it last changed. If a change matters, we will email account holders before it takes effect.