Privacy policy

1. Who we are

Site10x is operated by Site10x, 99/1, 1st Floor, 1st Cross Rd, Ramarao Layout, Katriguppe, BSK 3rd Stage, Bengaluru, INDIA - 560085 (“Site10x”, “we”, “us”). We are the Data Fiduciary for the personal data described in this policy, which means we decide why and how it is processed.

This policy applies to site10x.com, the free AI first drafts and concepts we create, our estimates and quotes, and our communications with you. It does not cover websites we build for clients; those are governed by the client's own policy.

2. What we collect

Information you give us

• For a free redesign: the website address you enter.
• For a free concept: your business description, business name, goal, preferred style, pages and, if you upload one, your logo.
• Contact details: your email address, and, if you choose to give them, your name, phone number, company and message, for example when you ask us to email you a draft or request a quote.
• Your selections: the features you choose and the estimate shown to you.
• Our conversations: emails, calls and feedback during a project.

Information we create or collect automatically

• Website captures: screenshots and text of the public pages of the website you enter, including business details published there (such as a phone number or address). We never log in, submit forms or change anything on that website.
• Your draft: the design, copy and recommendations generated for you.
• Technical data: a one-way hash of your IP address (we do not store the IP address itself), used to prevent abuse and enforce fair-use limits.
• How you found us: the referring page and campaign tags (UTM parameters) in the link you used.
• Usage analytics: if analytics is enabled, which pages and features you use, as described in section 7.

We do not ask for, and ask you not to send us, sensitive information such as financial account details, health information or government ID numbers.

3. How we use it

• To create your free first draft or concept and show it to you.
• To send you the link to your draft and other messages you ask for.
• To prepare estimates and quotes, respond to your enquiries and follow up about a project you have shown interest in.
• To deliver, support and invoice a project, if you become a client.
• To keep the service secure, prevent abuse and enforce limits on free drafts.
• To understand how the site is used and improve it.
• To meet our legal obligations, such as tax and accounting records.

4. Consent and legitimate uses

We process your personal data on the basis of your consent, which you give when you submit a form on our site after seeing a link to this policy, or for a legitimate use permitted by the DPDP Act, such as using the information you voluntarily gave us for the purpose you gave it, or complying with the law.

You can withdraw your consent at any time by writing to [email protected]. Withdrawing consent does not affect processing that happened before, and we may not be able to continue a service that depends on the data.

We do not sell your personal data, and we do not use it for advertising by others.

5. Who we share it with

We share personal data only with service providers (Data Processors) that help us run Site10x, under contracts that require them to protect it and use it only on our instructions:

• AI processing (Anthropic): the content of the website you enter or the description you give, to analyse it and generate your draft. We do not send your contact details for this purpose.
• Email delivery (Zoho CPaaS): your email address and the content of the emails we send you.
• Bot protection (Cloudflare Turnstile): technical information from your browser, to tell people from automated abuse.
• Analytics (PostHog), if enabled: how you use the site, as described in section 7.
• Hosting and storage providers, which store our database and files.
• Our CRM, where our sales team manages enquiries.

We may also disclose personal data if required by law, a court or a government authority, or to protect our rights, our users or the public, and to a successor if our business is reorganised or sold, subject to this policy.

6. Transfers outside India

Some of our service providers process data outside India, including in the United States. We transfer data only as permitted under the DPDP Act and not to any country the Government of India has restricted, and we choose providers that protect personal data with appropriate safeguards.

7. Cookies and similar technologies

• Essential: your light or dark theme choice is kept in your browser's local storage, and the campaign information of the link you arrived from is kept for the current browser session. Our team's admin area uses a secure sign-in cookie.
• Analytics: if analytics is enabled, PostHog may set cookies or use local storage to measure visits and understand which features are used. This information is linked to you only if you give us your email address.
• Security: Cloudflare Turnstile may process browser signals to stop automated abuse of our forms.

You can clear or block cookies and local storage in your browser settings. The site still works without analytics cookies.

8. How long we keep it

• Drafts and website captures: deleted automatically after 90 days, unless you become a client. After that, the draft link shows that it has expired.
• Enquiries and quote requests: kept for up to 24 months after our last contact with you, so we can follow up on your project, unless you ask us to delete them sooner.
• Client and billing records: kept for as long as the law requires, for example under tax and accounting rules.
• IP address hashes: kept with the request they relate to, for abuse prevention.

9. How we protect it

We use reasonable security safeguards, including encrypted connections (HTTPS), access only for staff who need it, secure sign-in for our admin area, hashing of IP addresses, and isolated rendering of drafts so content from other websites cannot run on our site.

No system is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and the affected people as required by law, and take steps to limit its effects.

10. Your rights

Under the DPDP Act, you have the right to:

• get a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with;
• have inaccurate or incomplete data corrected, completed or updated;
• have your data erased when it is no longer needed for the purpose it was collected for, unless the law requires us to keep it;
• withdraw your consent;
• have your grievances addressed by us; and
• nominate another person to exercise these rights if you die or become unable to do so.

To use any of these rights, email [email protected] from the email address you used with us, or tell us how we can verify your identity. We will respond within the time the law requires. You can also unsubscribe from our emails at any time by replying to them.

11. Children

Site10x is for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Grievance Officer

If you have a question or complaint about how we handle personal data, please contact our Grievance Officer:

K Prasanna
Site10x, 99/1, 1st Floor, 1st Cross Rd, Ramarao Layout, Katriguppe, BSK 3rd Stage, Bengaluru, INDIA - 560085
Email: [email protected]

We will acknowledge your complaint and resolve it within the time limits set by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

13. Changes to this policy

We may update this policy when our services or the law change. We will post the new version here with a new “Last updated” date and, for significant changes, tell you by email if we have your address. Please also read our Terms of service.