Privacy Policy

1. Data we collect

Depending on how you use StoryToSite, we collect: account and contact details; business and billing information; support communications; website requirements; audio recordings and transcripts; screenshots, pointer activity and reference website URLs; documents, images, logos and text you upload; technical logs such as IP address, browser, device and security events; and website analytics.

For payments, our payment provider processes card, UPI or bank details. We receive payment status and transaction identifiers, not full payment-card data. Do not send passwords, card numbers, government ID numbers or other unnecessary sensitive information in your story recordings or uploads.

2. Why we use it

We use personal data to create and deliver your website; register and manage domains; host the website and email; provide forms, chat, web statistics, storefront or payment functionality that you select; authenticate users; respond to support requests; send essential service and billing messages; prevent fraud and abuse; maintain backups and security; and comply with legal obligations.

We use the audio, screenshots, documents and references you provide to understand your project. We do not sell your personal data or use your private project material to advertise another customer's business.

3. Consent and choices

Where consent is required, we ask for it through a clear affirmative action and use the data for the stated purpose. You may withdraw consent by contacting us, although this may prevent us from completing or continuing the affected service. Withdrawal does not affect processing already required to fulfil a paid service, maintain security, meet legal obligations or resolve a dispute.

Marketing messages, if offered, will have a simple opt-out. Essential account, security, billing and service notices are not marketing messages.

4. Who receives data

We share data only as needed with providers that help us operate the service, including domain registrars, hosting and backup providers, email providers, payment gateways, analytics providers and technical support providers. If you choose a storefront, payment-gateway or print-partner benefit, relevant order and delivery information may be shared with that provider to fulfil the selected service.

We may disclose data where required by law, to protect rights or safety, or in connection with a business reorganisation. Providers may process data in India or other countries where they operate, subject to applicable law and appropriate contractual or technical safeguards.

5. Websites we build for customers

When we host a customer's website, the customer generally decides why visitor data collected through that website is used. For example, the customer is responsible for the content of a contact form, chat, store, marketing message and any consent notice shown to their visitors. We process such data to provide hosting and the selected features, subject to our agreement with that customer.

6. Retention

We retain account and project data while the service is active and for a reasonable period afterwards for backup, restoration, support, security and dispute purposes. We delete or anonymise data when it is no longer needed, unless a longer period is required by law. Billing, tax and transaction records may be retained for the period required by applicable law.

7. Security

We use reasonable administrative, technical and organisational safeguards designed to protect data. No internet transmission, storage system or account is completely secure. You must protect your credentials and notify us promptly if you suspect unauthorised access.

8. Your rights and complaints

Subject to applicable law, you may request access to, correction of, completion of, deletion of or information about your personal data, or withdraw consent. Write to support@storytosite.com with the subject line "Privacy request". We may need to verify your identity before acting. If you are dissatisfied with our response, you may use any complaint mechanism available under applicable law.

9. Children

StoryToSite is intended for business users and is not directed to children. Do not submit personal data of a child unless you are authorised to do so and applicable legal requirements have been met.

10. Changes and contact

We may update this Policy when our practices, providers or legal obligations change. We will publish the revised Policy here with its effective date. For privacy questions or requests, contact support@storytosite.com.