Privacy Policy

Sitezen (“we”, “us”) operates Sitezen — a platform where businesses create websites and manage their day-to-day operations. This policy explains, in plain words, what information we collect, why we collect it, and the choices you have. It applies to our own websites and apps. Websites our customers build with Sitezen are operated by those businesses — their privacy practices are their own, though we hold them to the platform rules below.

What we collect from you

• Account details — your name, email address and password (stored only as a strong one-way hash) when you sign up.
• Business details you give us — your business name, type, address, phone numbers, services, team members and the content you put on your website. This is the material your website is built from.
• Billing details — your plan, invoices and payment history. We never see or store your card or bank details: payments run entirely on the hosted pages of our payment partners (Razorpay in India, Stripe elsewhere).
• Usage and device information — standard technical logs (IP address, browser type, pages visited) used for security, rate-limiting and improving the product.

What we hold on behalf of your business

When visitors to your website submit an inquiry, book an appointment or interact with your pages, that information (their name, phone, email, message) is stored in your admin panel for you. You are the controller of that data; we process it on your instructions, keep it isolated to your account, and never sell it or use it to advertise to anyone.

What we do with information

• Run your website and admin panel — the service you signed up for.
• Send essential emails: verification, password resets, receipts, lead notifications.
• Answer support requests you send us.
• Keep the platform safe: fraud prevention, abuse detection, rate limits, backups.
• Understand product usage in aggregate. We do not sell personal data, and we do not run third-party advertising trackers on our platform pages.

Who we share it with

We share data only with the service providers needed to run the platform:

• Hosting and infrastructure (our servers and content delivery/DNS providers)
• Payment processing — Razorpay (India) and Stripe (international)
• Transactional email delivery
• Error monitoring and privacy-respecting product analytics

Each provider receives only what it needs to do its job. We never sell personal data to anyone, and we disclose it to authorities only when the law requires.

Cookies

Our platform uses essential cookies only: a session cookie to keep you signed in and security cookies that protect forms. We do not set advertising or cross-site tracking cookies. Websites built by our customers may add their own analytics or advertising tags — that choice, and the duty to disclose it, is theirs.

Where data lives and how long we keep it

Your data is stored on secured servers with encrypted secrets, daily backups, and strict per-account isolation. If you cancel, your data is not deleted immediately: you can export it at any time, your site address is reserved for 90 days, and you can ask us to delete your account data permanently whenever you wish.

Your rights

You can access, correct, export or delete your personal data — most of it directly from your dashboard, and anything else by writing to [email protected]. We honour the rights granted by India’s Digital Personal Data Protection Act, 2023 and, where it applies, the GDPR. If a visitor to a customer’s website contacts us about their data, we will route the request to that business and help them fulfil it.

Changes and contact

If this policy changes in a way that matters, we will tell you by email or an in-product notice before the change takes effect. Questions, requests or complaints: [email protected] — see our contact page for full details. This document is provided for transparency and is not a substitute for independent legal advice for your own business.