This policy explains what personal data Idea2Site collects, why, who it is shared with and the choices you have. Idea2Site (idea2site.com and app.idea2site.com) is run by Sensys Technologies Pvt. Ltd., Mumbai, India ("we", "us"). It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. Two kinds of data
Your data. When you sign up and use Idea2Site, we decide how your account data is used, and we are responsible for it (a “data fiduciary”).
Your website's visitors and customers. When people send a form, place an order or create an account on a website you made with Idea2Site, that data belongs to your business. You are responsible for it and for telling them how you use it; we store and process it only to run your website for you (as a “data processor”). Make sure your website has its own privacy notice; Idea2Site can help you write one.
2. What we collect
- Account details: your name, email address, password (stored only as a secure hash), workspace and business name. If you sign in with Google, we receive your name, email address and Google account ID.
- What you give us to build your website: descriptions of your business, answers in the setup interview, photos, videos, logos, product and price lists, documents, and anything you type or say to the AI assistant. If you use voice input, your recording is sent for transcription and is not kept after it has been turned into text.
- Payment details: payments are handled by Razorpay. We never see or store your card, UPI or bank details. We keep a record of what you bought, the amount, the payment reference and the billing details you enter for your invoice (such as your GSTIN).
- Domain registration details: when we register a domain for you, the registrar requires the owner's name, address, email and phone number.
- Technical data: your IP address, browser and device type, and records of sign-ins and actions in your account, kept for security, to prevent abuse and to fix problems.
- Messages: what you write to us for support.
3. How we use it
- To create your account, sign you in and keep it secure.
- To design, host and publish your websites, register and connect your domains, and run features such as forms, shops and visitor statistics.
- To process payments, issue GST invoices and keep the accounting records the law requires.
- To send you emails about your account: confirmations, receipts, plan and domain renewal reminders, and important changes. We send marketing emails only if you agree, and you can stop them at any time.
- To give support. With your permission, our support staff may open your workspace to help you.
- To prevent fraud and abuse, and to meet legal obligations.
4. Artificial intelligence
Idea2Site uses AI models from third-party providers to write and design websites, edit them when you ask, read price lists and photos you upload, create images and transcribe voice. To do this, the content needed for each request (for example your business description, the page being edited, your instruction, or a photo of your menu) is sent to the provider. We do not use your content to train AI models, and we choose providers that do not train on data sent through their business services. AI output can be wrong: please review your website before you publish it.
5. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run Idea2Site, under contracts that require them to protect it, and only as much as each needs:
- Hosting and email: Amazon Web Services (servers, database, file storage, sending email) and Cloudflare (hosting published websites, protection against bots).
- AI providers: OpenRouter, OpenAI and Anthropic, as described above.
- Payments: Razorpay.
- Sign-in: Google, if you choose to sign in with Google.
- Domains: our domain registrar (ResellerClub), and the registry for your domain ending, which may publish some details in the public WHOIS directory unless privacy protection applies.
We may also disclose data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.
Some of these providers process data outside India. When they do, we take steps to make sure your data stays protected as Indian law requires.
6. Cookies
Idea2Site uses only the cookies it needs to work: one that keeps you signed in, and a short-lived one during Google sign-in. We do not use advertising or tracking cookies. The visitor statistics on websites made with Idea2Site count daily visits without cookies and without storing visitors' IP addresses.
7. How long we keep it
- Account data and your websites: while your account is open. When you ask us to close your account, we delete them within 30 days, except what the law requires us to keep.
- Websites you delete are taken offline and hidden from your account at once. We keep a copy so it can be recovered if it was deleted by mistake; ask us to remove it for good, or it is removed when your account is closed.
- Invoices and payment records: for 8 years, as Indian tax law requires.
- Security and usage records: only as long as needed for security, preventing abuse and accounting.
- Backups are replaced on a rolling basis, so deleted data disappears from them over time.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask for a summary of the personal data we hold about you and how we use it;
- correct, complete or update it (most of it you can change yourself in Settings);
- ask us to erase it, unless we must keep it by law;
- withdraw consent you have given, for example to marketing emails;
- nominate someone to exercise these rights if you die or cannot act yourself;
- raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.
Write to rm@sensysindia.com from the email address on your account. We reply within 30 days.
9. Security
We protect your data with encrypted connections (HTTPS), hashed passwords, encryption of stored secrets such as payment gateway keys, strict separation between workspaces, limited staff access and regular backups. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
10. Children
Idea2Site is for businesses and people aged 18 or over. We do not knowingly collect data from children.
11. Changes to this policy
We may update this policy. We will post the new version here with its date, and email you about important changes before they take effect. See also our Terms of service.
12. Grievance Officer
For any question or complaint about your personal data, contact our Grievance Officer, Ravindra Mishra, at rm@sensysindia.com or by post at the address below. We acknowledge complaints within 24 hours and resolve them within 30 days.
Contact us
Sensys Technologies Pvt. Ltd. (Idea2Site)
904, 905, 906, Corporate Annexe, Sonawala Road, Goregaon (East), Mumbai 400063, Maharashtra, India
Email: rm@sensysindia.com · Phone: +91 98673 07971