Your data is yours —
we never sell it
We collect only what is needed to build and run your website. No lists sold, no details passed on to anyone else.
Last updated: 22 August 2026
What we do
- Collect only the details we actually need
- Keep your files and logins secure
- Remove extra access once the work is done
- Delete your data when you ask us to
What we never do
- Sell your data or hand it to an agency
- Message your customers on our own behalf
- Run undisclosed tracking or spam calls
- Use your enquiry list for our own business
1. Who is responsible for your data
Codage Habitation LLP, trading as TheSiteHome, Ahmedabad, Gujarat, India, decides how and why your personal data is handled. In the language of India's Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the Data Fiduciary and you are the Data Principal.
For any privacy question, correction or deletion request, contact us at hello@thesitehome.in or on WhatsApp at +91 72300 43008. That is also our grievance contact point under the DPDP Act.
2. What we collect
- When you enquire or request a free site: your name, mobile or WhatsApp number, city, type of business and whatever you write to us. We use it to build the site and to recommend the right plan.
- Your business details: business name, address, opening hours, services and prices, and a GST number if you give us one for the invoice.
- Content you upload: photos, logos, menus, price lists and any text you send for the website — including anything you send over WhatsApp.
- Payment information: handled by Razorpay, our payment gateway. We receive a transaction reference, the amount, and whether the payment succeeded. We never receive or store your card number, CVV, UPI PIN or banking password.
- Communication records: a log of messages exchanged with you on WhatsApp and email, so support has the history of your project.
- On this website: basic visit counts, such as which page was viewed how often. This does not identify anyone.
3. Why we use it, and your consent
We use your data for four things only: (a) answering your questions and sending you a quotation, (b) building, launching and maintaining your website, (c) invoicing, payments and GST records, and (d) important service notices such as a renewal falling due or the site going down.
WhatsApp. WhatsApp is how we run this service, so when you give us your number and start a conversation with us, you are consenting to us contacting you there about your website — updates, drafts, questions, invoices and renewal reminders. Messages are sent through the Meta WhatsApp Cloud API, which means Meta processes them as well, under its own terms.
You can withdraw consent at any time. Reply STOP on WhatsApp, or write to us, and we stop messaging you. Withdrawing consent for service messages may mean we can no longer run your website, since that is how the service works — we will tell you plainly if that is the case. We send promotional messages only if you separately opt in, and a single STOP ends those.
4. Where your data is stored and who processes it
We use a small number of service providers to run the service. They process data on our instructions only, and none of them are permitted to use it for their own purposes. We do not sell your data to anyone.
- Cloudflare R2 — stores the images, logos and files you upload for your website.
- Our database (Supabase) — stores your business details, project status, website content and message history.
- Razorpay — processes payments, subscriptions and refunds, under RBI regulation.
- Meta WhatsApp Cloud API — delivers our WhatsApp messages to and from you.
- An AI provider (Anthropic) — the free Starter site is generated with AI assistance, so the business details and text you submit for it are sent to that provider to draft your page content. It is not used to train their models.
- Domain registrar and hosting provider — to register your domain and keep the site online.
- Our accountant, and law enforcement or a court where legally required — and then only as much as is required.
Some of these providers operate servers outside India. Where your data is transferred abroad, we do so in line with the DPDP Act and only to the extent needed to run the service.
If your site uses the AI chatbot or WhatsApp AI agent add-on, your customers' messages pass through that AI service too. We tell you before enabling it.
5. Your customers' data
Enquiries submitted through your website's contact form belong to you and go straight to your WhatsApp and email. We do not build a list from them, market to them, or use them for anything of our own. While fixing a technical issue we may occasionally see form entries; we do not copy or store them.
For the data your own customers give you, you are the Data Fiduciary and we are your processor. Telling your customers how you handle their data is your responsibility.
6. How long we keep it, and how we protect it
Project files, website content and backups are kept for as long as your plan is active, and for 90 days after it ends so an accidental lapse can be undone. Invoices and GST records are kept for 8 years, as tax law requires. Enquiries that never became a project are deleted after 12 months. A free Starter site that is never renewed is archived and then deleted.
Access is limited to the few people who need it, credentials are held securely, and any logins you share with us are removed from our side once the work is done — we ask you to change the password as well. No system is perfectly secure, but if a breach affecting your data occurs, we will notify you and the Data Protection Board as the DPDP Act requires.
7. Your rights
Under the DPDP Act you can ask us to tell you what data we hold about you and how it is used, correct anything wrong or out of date, delete your data, and nominate someone to exercise these rights if you cannot. You can also withdraw consent, or raise a grievance with us — and if we do not resolve it, escalate to the Data Protection Board of India.
One WhatsApp message or one email is enough. Write to hello@thesitehome.in and we respond within 7 working days. The only thing we cannot delete on request is invoice and GST records, which the law requires us to retain. Deleting your project data will normally mean your website comes down.
This policy is updated from time to time; the current version and its date are always on this page. If a change materially affects you, we tell you.