Privacy Policy

Sitezen (“we”, “us”) operates Sitezen — a platform where businesses create websites and manage their day-to-day operations. This policy explains, in plain words, what information we collect, why we collect it, and the choices you have. It applies to our own websites and apps. Websites our customers build with Sitezen are operated by those businesses — their privacy practices are their own, though we hold them to the platform rules below.

What we collect from you

• Account details — your name, email address and password (stored only as a strong one-way hash) when you sign up.
• Business details you give us — your business name, type, address, phone numbers, services, team members and the content you put on your website. This is the material your website is built from.
• Billing details — your plan, invoices and payment history. We never see or store your card or bank details: payments run entirely in the secure window of our payment partner, Razorpay.
• Usage and device information — standard technical logs (IP address, browser type, pages visited) used for security, rate-limiting and improving the product.

What we hold on behalf of your business

When visitors to your website submit an inquiry, book an appointment or interact with your pages, that information (their name, phone, email, message) is stored in your admin panel for you. You are the controller of that data; we process it on your instructions, keep it isolated to your account, and never sell it or use it to advertise to anyone.

What we do with information

• Run your website and admin panel — the service you signed up for.
• Send essential emails: verification, password resets, lead notifications.
• Answer support requests you send us.
• Keep the platform safe: fraud prevention, abuse detection, rate limits, backups.
• Understand product usage in aggregate. We do not sell personal data, and we do not run third-party advertising trackers on our platform pages.

Who we share it with

We share data only with the service providers needed to run the platform:

• Hostinger — the servers our platform and your website run on.
• Cloudflare — carries every visit to our websites and yours (content delivery, DNS and security), and stores uploaded images and files and our daily backups (Cloudflare R2).
• Razorpay — payments for our plans. You enter your payment details in Razorpay’s own secure window; we never see them.
• Resend — delivers the emails we send: sign-in and password emails, lead and booking notifications, and the emails your website sends your customers.
• Anthropic — the AI model behind the AI receptionist and our other AI features. What a visitor types to your receptionist, and the business details it answers from, are sent to Anthropic to write the reply.
• Sentry — error monitoring. When something breaks, a technical report goes to Sentry; it can include the address of the page where it happened.
• PostHog — usage analytics for our dashboard only (never on your website), with anything typed masked.
• Your own payment gateway — if you connect your Razorpay or Stripe account to take payments on your website, the name, email and phone of the customer who pays go to your gateway with each payment.

Each provider receives only what it needs to do its job. We never sell personal data to anyone, and we disclose it to authorities only when the law requires.

Cookies

Our platform uses essential cookies only: a session cookie to keep you signed in and security cookies that protect forms. Our dashboard also keeps an anonymous analytics identifier in your browser’s storage (PostHog) to count which of its pages are used — never on your website, never for advertising. We do not set advertising or cross-site tracking cookies. Websites built by our customers may add their own analytics or advertising tags — that choice, and the duty to disclose it, is theirs.

Where data lives and how long we keep it

Your data is stored on secured servers with encrypted secrets, daily backups, and strict per-account isolation. If you cancel, your data is not deleted: your account moves to the free plan with your website still online, and you can export your records at any time. You can also ask us to close your account: your website goes offline and sign-in is switched off straight away, and if you asked for deletion, your account and its data are deleted after a 30-day hold. Payment records are the exception — the law requires us to keep them, so an account with payment history is closed and kept, never deleted.

Your rights

To access, correct, export or delete your personal data, write to support@sitezen.app from your account email, and we act on your request within the timeframe the law requires. You can already download your clients, expenses, khata and products from your panel yourself. We honour the rights granted by India’s Digital Personal Data Protection Act, 2023 and, where it applies, the GDPR. If a visitor to a customer’s website contacts us about their data, we will route the request to that business and help them fulfil it.

Changes and contact

If this policy changes in a way that matters, we will tell you by email or an in-product notice before the change takes effect. Questions, requests or complaints: support@sitezen.app — see our contact page for full details. This document is provided for transparency and is not a substitute for independent legal advice for your own business.