Privacy Policy

Effective date: [TO BE CONFIRMED: effective date — set this to the date of legal review]

This policy explains what information Websora collects through websora.online, why we collect it, and what you can ask us to do with it.

It applies to this website and to enquiries sent through it.

The Short Version

This is a summary. The sections below are the full policy, and nothing here is intended to contradict them.

We collect only what we need to reply to your enquiry and keep this website working.
We do not sell your personal information, and we never share it for advertising.
We do not add you to a marketing list. If you send an enquiry, we reply about that enquiry.
You can ask us what we hold about you, ask us to correct it, or ask us to delete it — see Your Rights below.
To ask about anything on this page, email [TO BE CONFIRMED: privacy email address].

Who We Are

Websora is a website development business operating from India[TO BE CONFIRMED: business address, or at least city and state].

Websora is [TO BE CONFIRMED: registered business name and entity type, or a statement that it is not a registered entity].

We help startups and growing businesses build websites designed around their business goals.

If you have a question about this policy, or about information we hold, please use the contact details in the final section of this page.

Information We Collect

Information you give us

The only form on this website is the enquiry form. When you use it, you send us:

Your name
Your email address
Your business name
Your website address, if you choose to enter one — this field is optional
Whatever you write in the message about your project

If you email us directly instead, we receive whatever you choose to include in that email.

We do not ask for payment details, identity documents, or any sensitive personal information through this website.

Information collected automatically

When you submit an enquiry, we also record a small amount of technical information alongside it:

Your browser's user agent string, shortened, which tells us the browser and device type.
The page you submitted the form from.
A scrambled version of your IP address. We convert it into an unreadable value that cannot be turned back into your address, and we use it only to stop the same source from flooding the form. Your actual IP address is not stored.

Our hosting provider also keeps standard server logs for security and reliability, in the normal way any web host does.

This website does not use any analytics tool. We do not track how you move around the site, and we do not build a profile of you. If that changes, we will update this policy and the effective date above.

How We Use Your Information

We use what we collect to:

Reply to your enquiry and discuss a possible project.
Carry out work we have agreed to do.
Keep this website secure, available and working correctly.
Protect the enquiry form from automated abuse.
Meet legal and accounting obligations.

To be explicit about what we do not do:

We do not sell personal information.
We do not share personal information for advertising.
We do not add people who enquire to a marketing list unless they ask us to.

Why We Are Allowed to Use It

Different information is held for different reasons. In plain terms:

Your consent: When you fill in the enquiry form and send it, you are choosing to give us that information so we can reply.
Carrying out an agreement: If we work together on a project, we need your contact and business details to do that work.
Legitimate business interests: Keeping the website secure and functioning, preventing automated abuse of the form, and keeping a record of business enquiries.
Legal obligation: Where the law requires us to keep certain records, such as for accounting.

Cookies and Analytics

This website sets one cookie. It exists to protect the enquiry form from automated submissions, and it does nothing else.

form_token: Holds a signed timestamp recording when you loaded the page, so we can tell a person filling in a form apart from a script submitting instantly. It contains no identifier and no information about you, it cannot be read by scripts in your browser, and it expires after twelve hours.

We do not use analytics, advertising, or tracking cookies. No third party sets cookies through this website.

You can block or delete cookies in your browser settings at any time. If you block this one, the enquiry form may refuse your submission and ask you to reload the page.

Third-Party Services

We use a small number of established services to run this website. Each one only handles what it needs to, and each has its own privacy policy:

Vercel: Hosts this website and serves it to your browser. Keeps standard server logs.
Supabase: Stores enquiries sent through the form. Our database is located in Mumbai, India.
Resend: Delivers the two emails an enquiry produces: a notification to us, and a confirmation to you.
[TO BE CONFIRMED: business email provider]: Handles our business email, including any reply we send you.

We do not use any analytics or advertising service.

How Long We Keep Your Information

Enquiries that do not lead to a project: [TO BE CONFIRMED: retention period for unsuccessful enquiries — suggested 24 months]
Records relating to clients and completed projects: [TO BE CONFIRMED: retention period for client records, and the accounting or tax rule it follows]
Website and server logs: [TO BE CONFIRMED: retention period for logs — usually set by the hosting provider]

You do not have to wait for these periods to pass. You can ask us to delete your information sooner, and we will unless the law requires us to keep it. See Your Rights below.

How We Protect Your Information

In practical terms:

This website is served over an encrypted connection, so what you type into the form is encrypted in transit.
Enquiries are stored in a database that is not publicly reachable. It rejects any request that does not come from our own server.
Your IP address is scrambled before it is stored, so it cannot be recovered from our records.
We use established service providers rather than running our own infrastructure.
Access to enquiries is limited to the people who need it to reply to you.

We should be honest about the limits of this: no method of sending information over the internet, and no method of storing it, is completely secure. We take reasonable care, but we cannot guarantee absolute security, and you should not send us anything highly sensitive through the enquiry form.

International Transfers

Enquiries are stored in a database located in Mumbai, India.

Some of the services we rely on are based outside India and may process or store information on servers elsewhere, including in the United States and Europe. This is normal for modern web infrastructure, and it applies to our hosting and email delivery providers.

When we choose a provider, we look for established companies with published privacy commitments, and we give each one only the information it needs to do its job.

Your Rights

You can ask us to do any of the following. Email [TO BE CONFIRMED: privacy email address] and tell us what you would like. We will reply [TO BE CONFIRMED: response time, e.g. within 30 days].

See what we hold: Ask for a copy of the information we have about you.
Correct something: Tell us if anything we hold is wrong or out of date, and we will fix it.
Delete it: Ask us to erase your information. We will, unless the law requires us to keep it — in which case we will tell you which records we must keep and why.
Withdraw your consent: If you gave us information through the form and no longer want us to hold it, you can change your mind.
Object to a particular use: Tell us you are not comfortable with something specific, and we will look at it.
Complain: If you are unhappy with how we handled your request, tell us and we will try to put it right.

We will not charge you for making a request, and we will not treat you differently for making one.

If you are in the United Kingdom or the European Union, you may have additional rights under the GDPR. We will honour equivalent requests regardless of where you are.

If you are not satisfied with our response, you can escalate the matter: [TO BE CONFIRMED: escalation route and authority — to be confirmed during legal review].

Children's Privacy

This website and our services are intended for businesses and the people who run them. They are not directed at children.

We do not knowingly collect information from children. If we learn that a child has sent us information through the enquiry form, we will delete it.

If you believe a child has sent us information, please contact us and we will remove it.

Changes to This Policy

We will update this policy as the business grows or the tools we use change. For example, if we add analytics in future, this page will say so before it happens.

The effective date at the top of this page always reflects the most recent change.

If we make a change that meaningfully affects people we are already working with, we will tell those clients directly rather than relying on them to re-read this page.

Contact Us

If you have a question about this policy, or you want to make any of the requests described above, please get in touch.

Privacy enquiries: [TO BE CONFIRMED: privacy email address]
General enquiries: hello@websora.online
Grievance Officer: [TO BE CONFIRMED: whether a Grievance Officer is required, and if so their name and contact details — to be confirmed during legal review]
Response time: We aim to reply [TO BE CONFIRMED: response time, e.g. within 30 days].