Privacy Policy
Last updated 30 September 2026
This policy explains what personal data we collect, why we collect it, and the rights you have under India’s Digital Personal Data Protection Act, 2023.
What we collect
- Your account details — name, phone number, email address.
- Your business details — business name, address, phone, services, prices, social handles and any text you write. This is published on your website, which is its purpose.
- Photos you upload — stored and published on your website.
- Payment records — amount, date, and a Razorpay transaction reference. We never see or store your card or UPI details.
- Technical data — IP address and timestamps, used for rate limiting and fraud prevention.
Why we collect it
- To build and publish the website you paid for.
- To take payment and issue an invoice.
- To contact you about your order.
- To stop abuse of our free preview tool.
We do not sell your data. We do not use it for advertising.
Who we share it with
Only the services needed to run the product:
- Google Firebase — hosting, database and file storage.
- Razorpay — payment processing.
- Google Gemini — generating your website text. Your business name and description are sent; your phone number, email and address are not.
AI-generated text
When you ask us to write your website copy, we send your business name and your short description to an AI service. We explicitly instruct it to treat your input as data rather than as instructions, and we strip content designed to manipulate it. We do not send your contact details.
How long we keep it
Your order and website data is kept for as long as your website is published. Payment records are kept for 8 years, as required by Indian tax law. Preview requests from people who never bought are deleted after 90 days.
Your rights under the DPDP Act
- Ask for a copy of the personal data we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to delete your data, subject to the tax retention period above.
- Withdraw consent, which means we take your website down.
- Nominate someone to exercise these rights if you cannot.
- Complain to the Data Protection Board of India.
To exercise any of these, email privacy@mysitemaker.in. We respond within 30 days.
Security
Data is encrypted in transit (HTTPS) and at rest. API keys and payment secrets are held in a managed secret store, never in our code. Access to customer data is limited to what is needed to operate the service.
Where your data is stored
On Google Cloud infrastructure. We use an Asian region to keep your website fast for Indian visitors. Some processing may occur outside India where our providers operate.
Cookies
Some cookies are necessary: they keep you signed in and remember your design choices while you browse. These are always on, because the site cannot work without them.
If you choose Accept all, we also use Google Analytics to count visits and see which pages people use. It tells us how many people came and which designs they looked at — not who you are. Google receives your IP address, shortened, and may process it outside India. We do not run advertising cookies and we do not sell your data to anyone.
If you choose Essential only, Google Analytics is never loaded. Nothing about your visit is sent to Google. You can change your mind by clearing this site's data in your browser, which brings the choice back.
Children
This is a service for businesses. It is not intended for anyone under 18, and we do not knowingly collect data from children.