Last updated: April 2026
Popcorn CMS ("we," "us," or "our") operates the Popcorn CMS Service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.
Account Information: When you create a Popcorn CMS account, we collect your name, email address, password, company name, and billing information.
Content and Data: We store and process the content, media, and data you upload and create through the Service. This includes pages, articles, media files, and other materials you manage through Popcorn CMS.
Usage Information: We automatically collect information about your interactions with the Service, including IP address, browser type, pages visited, time spent on pages, and referring URLs.
Device Information: We collect information about the devices you use to access the Service, including device type, operating system, and unique device identifiers.
Payment Information: Payment processing is handled by Stripe. We do not directly store your full credit card details, but we do store transaction records and billing history.
We use the information we collect to:
Active Accounts: We retain your account information, including content and data, for as long as your account is active.
After Account Termination: After you cancel your subscription or we terminate your account, we will retain your data for up to 30 days to allow for account recovery or legal compliance. After this period, your data will be permanently deleted from our production systems.
Backup and Archives: We maintain automated backups of your data on Google Cloud with 90-day retention for disaster recovery purposes. Backups are encrypted and stored separately from production data with restricted access. In case of accidental deletion or data loss, we may be able to restore your data from these backups within the 90-day window. After the 90-day period, backup copies are permanently deleted.
Data Location: Your data is stored in Google Cloud data centers. For redundancy and disaster recovery, data may be replicated across multiple regions. If you require data residency in a specific geographic location, please contact us at stesmi+popcorn@gmail.com.
Legal Holds: If we receive a legal request or there is an active dispute, we may retain your information as required by law for longer periods.
Aggregated Data: We may retain aggregated and anonymized data indefinitely for statistical and analytical purposes.
We implement comprehensive technical and organizational security measures to protect your information, including:
Shared Responsibility Model: Security is a shared responsibility between Popcorn CMS and our infrastructure provider:
However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security.
Our Service integrates with third-party services:
Google Cloud Data Processing: Google Cloud Platform acts as a data processor on our behalf under a Data Processing Agreement. Google Cloud complies with SOC 2 Type II certification, ISO 27001, and applicable data protection laws (GDPR, CCPA, etc.). Google Cloud may engage subprocessors for services such as CDN, backup, monitoring, and security services. A current list of subprocessors is available at Google Cloud Terms. We will notify you of material changes to subprocessors.
These third parties have their own privacy policies. We are not responsible for their privacy practices, but we maintain agreements to ensure they protect your data appropriately.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, contact us at stesmi+popcorn@gmail.com
We use cookies and similar tracking technologies to enhance your experience. You can control cookie settings through your browser preferences or by managing your consent preferences.
Essential Cookies (Always Active):
Essential cookies are required for the Service to function and cannot be disabled without affecting core functionality.
Non-Essential Cookies (Requires Consent):
We only load non-essential cookies after you provide explicit consent via our cookie consent banner. For detailed information about cookies, including how to manage preferences, see our Cookie Policy.
Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws different from your home country.
By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.
The Service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we become aware that we have collected information from a child under 13, we will delete such information immediately.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last updated" date above.
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: stesmi+popcorn@gmail.com