Skip to content
Security

Your App Store Connect key, handled carefully.

The questions every developer asks before uploading a key, answered plainly.

A key going into a lock box

What the key needs, and why

An App Manager key. It lets Pagefully read your listing and create custom product pages. Seeing results per page needs the Sales and Reports role as well, or an Admin key; we tell you which when you connect.

What we read

  • Your app’s listing: name, subtitle, description, keywords, screenshots, in each language.
  • Your custom product pages, and how each one performs (views, installs, conversion).
  • Your public App Store reviews.

What we write

  • Custom product pages you approve: their screenshots, promotional text and keywords.
  • A submission to App Review, only when you press the button that says so.

Nothing goes to Apple without your click, and every step that changes something at Apple shows exactly what will change first.

How the key is stored

Encrypted (AES-256-GCM) before it is stored, with an encryption key kept outside the database. It is never written to a log, and never shown again after you upload it.

Revoking it

Revoke the key in App Store Connect under Users and Access, Integrations, at any time. Pagefully stops working for that app the moment you do. Your published pages stay live.

What we never do

  • Change your app binary
  • Edit your default product page
  • Touch pricing or in-app purchases
  • Contact Apple on your behalf

Where your data lives

The database and files are in the United States (Supabase, us-west-2). Screenshots are drawn on servers in the United States (Fly.io, San Jose). The app is served by Vercel.

Sub-processors

OpenAI (writing and image generation), TypeSafe (classification), Resend (email), Stripe (payments), Vercel, Supabase and Fly.io (hosting).

Questions about security: hello@foql.com. Ready to try it? Start free.