Summary: We collect only what we need to run DsitesAI. We don't sell your data. You can delete your account and all data at any time.
1. Who We Are
DsitesAI ("we", "us", "our") is a website builder platform that allows users to create, manage, and publish websites. By using DsitesAI, you agree to this Privacy Policy.
2. Information We Collect
2.1 Account Information
- Full name, email address, and username when you register
- Password (stored as a bcrypt hash — we never store plain-text passwords)
- Profile information you choose to provide
2.2 Website Content
- Content you create: site names, pages, sections, text, images
- Contact form submissions received through your sites
- Gallery images you upload
2.3 Usage Data
- AI generation usage (count per month for plan enforcement)
- Login timestamps and IP addresses (for security and rate limiting)
- Browser type and device information (for analytics)
2.4 Payment Information
Payment processing is handled by Razorpay. We do not store credit card numbers or full payment details. We store only the Razorpay payment ID and subscription status.
3. How We Use Your Information
- To provide and operate the DsitesAI platform
- To authenticate your account and prevent unauthorized access
- To enforce plan limits (sites, AI generations, uploads)
- To send transactional emails (order confirmations, password resets)
- To improve the platform based on usage patterns
- To comply with legal obligations
4. Data Sharing
We do not sell, rent, or trade your personal information. We may share data with:
- Razorpay — for payment processing
- Google — if you use Google OAuth login or Google Analytics
- AI providers — your website description is sent to the AI API to generate content. We do not send personally identifiable information to AI providers.
- Law enforcement — if required by law or to protect our rights
5. Data Storage & Security
- Data is stored in a MySQL database on our servers
- Passwords are hashed with bcrypt (cost factor 12)
- Sessions expire after 30 minutes of inactivity
- IP-based rate limiting protects against brute force attacks
- CSRF tokens protect all form submissions
- We use HTTPS for all data transmission
6. Cookies
We use session cookies to keep you logged in. We do not use tracking cookies or third-party advertising cookies. If you enable Google Analytics on your sites, those sites will use Google's cookies.
7. Your Rights
- Access — request a copy of your personal data
- Correction — update incorrect information in your profile
- Deletion — delete your account and all associated data
- Portability — export your sites as ZIP files
- Opt-out — unsubscribe from marketing emails at any time
To exercise these rights, contact us at privacy@dsitesai.com.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account, all your sites, pages, images, and personal data are permanently deleted within 30 days.
9. Children's Privacy
DsitesAI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of DsitesAI after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, contact us at:
