The short version
We collect what you give us when you submit your URL or contact us. We use it to send you a redesign and to talk to you about it. A few AI services help us do that work, and none of them trains its models on your data. We don't sell it, rent it, or pass it to third parties for marketing.
What we collect
When you send us your site through the form: the URL you paste (or, if you don't have a site yet, the link you give us and whatever you tell us about the business), the email address you give us, a WhatsApp or phone number if you add one (with the country you pick beside it), the style you pick, any files you attach, and basic technical metadata like the timestamp and a hashed version of the IP address your browser came from. We use the phone number only to get in touch with you about your redesign.
If you add your WhatsApp number on the form, we message you there about that request: once to confirm it, once when your site is ready, and once more a few days later. We keep a note of when you agreed to that and of the wording you saw. Reply STOP and we won't message you there about it again. Anything you send back is read by a person on our team, and those messages, and ours, are kept and deleted on the same terms as a customer's WhatsApp messages below.
If you press "Continue with Google" on the form instead of typing your email address, Google tells us the email address and name on your Google account, and that the address is yours. We use the address exactly as if you had typed it, and the name to greet you. We ask Google for nothing else, and we get no access to your Google account, your inbox or your contacts. When Google itself runs your mailbox (a Gmail address, or one on Google Workspace), that is enough for us, and we don't email you asking you to confirm the address. For any other address we still do.
If you become a paying customer later, we'll also process the billing details required to charge you. Card data lives with our payment processor, not with us.
If you have an account with us and ask Inky a question in your dashboard, we keep your messages and Inky's answers with your account.
If you connect a WhatsApp number, we keep the number, the account id WhatsApp gives us for it, and when and from which signed-in account it was connected. We also keep the messages, photos and files you send us there, the text of your voice notes (never the audio), and our replies.
What we track
We run Google Analytics on this site. We also remember which ad or link brought you here - the campaign tags and click id in the URL - for the length of your visit, and send that along with your form, so we know which ad produced the enquiry.
Once you confirm your email address, or sign in with Google on the form, we tell the advertising platform that brought you here that the enquiry was real, so we know which ad worked. To Google we send only the click identifier from the link you arrived on, and the date - never your email address. Reporting to Meta would additionally use a one-way hashed version of your email address, never the address itself, together with your website address; that reporting is switched off.
The emails we send you carry a tiny invisible image. When your email app loads it, our email service, Resend, tells us that the email was opened and when. If your email app doesn't load images, we never learn that.
If you're in the EEA, the UK or Switzerland, we deny advertising and analytics storage by default and it stays that way, so nothing here sets a cookie for those purposes and there is nothing to ask you about. We don't advertise in those regions.
On the websites we run for our customers, our servers log each visit, as every web server does: the page asked for, the time, the address of the page that sent the visitor, and the visitor's IP address and browser. We keep those logs for 30 days and use them to count our customers' visitors, leaving out bots. We also keep a record of each time a visitor taps a link to call, message, email or find one of our customers: which link, on which page, the page they arrived on, and the name of the website that sent them there, if any. That record itself holds no IP address or anything else about the visitor, and it is kept with the customer's account. When a visitor sends a message through one of our customers' contact forms, we note the same two things on that message: the page they arrived on, and the name of the website that sent them there, if any. We match the two with a random code the page makes each time it loads, which is not about the visitor and is not kept in their browser. Counting these sets no cookie and stores nothing in the visitor's browser.
We don't sell or rent your data, and none of these services get it for their own marketing.
Who handles the form for us
We use a small handful of services to receive and act on what you submit. None of them get your data for their own purposes.
- Cloudflare Turnstile - the bot check above the submit button. Cloudflare receives anonymous signals from your browser so we can tell humans from scripts.
- Google Sign-In - the "Continue with Google" button on the form. Your browser loads it from Google when you start filling the form in, and if you press it, Google handles the sign-in and tells us your email address and name.
- Cloudflare Workers - the endpoint your submission goes to. It runs the bot check and the rate limiting, then passes the submission on to us.
- Google Cloud Run - our own application, which receives it.
- Google Cloud SQL - the database your submission is stored in. Managed Postgres, running in Google Cloud's us-central1 region (Iowa).
- Neon - our previous database host (AWS, us-east-1). It keeps a read-only copy while we confirm the move, and that copy is then deleted.
- Google Cloud Storage - where any files you attach to the form are kept.
- Resend - the email service that pings us when a submission comes in. The notification routes through Resend (Amazon SES infrastructure, us-east-1).
The AI services that help us
We use AI models to build your redesign, to make the changes you ask for, and to answer the questions you ask Inky in your dashboard. Each one receives only what its part of the job needs. None of them uses your data to train its models, and none gets it for its own purposes.
- Anthropic (Claude) - builds your redesign and makes your changes. It receives your current website's public pages, what you told us in the form or in a change request (from your dashboard or on WhatsApp), and the files you send us. When you ask Inky a question in your dashboard, it also receives your message, the pages of your own site it reads to answer you, and the account details the answer needs, such as your plan and the changes you have in progress. Anthropic deletes this within 30 days, unless its safety systems flag something, in which case it can keep that part for longer.
- OpenAI and Google (Gemini) - image models we use to improve your photos and your logo: sharpening a low-resolution photo, correcting its lighting, extending it to fit its space on the page, or redrawing a logo cleanly. They receive only the image being worked on and our instructions for it. OpenAI deletes it within 30 days, and Google keeps it only for a limited time, to watch for misuse.
Who handles WhatsApp for us
These services handle your WhatsApp messages with us.
- Meta (WhatsApp Business Platform) - carries the messages between you and us, as our data processor. Meta says it keeps message content for up to 30 days to deliver it, and photos, files and voice notes for 30 days. We can't make Meta delete its copy sooner.
- Google (Gemini, on Google Cloud's Vertex AI) - turns your voice notes into text. It receives only the audio, and doesn't train its models on it. It may cache the audio in memory for up to 24 hours, and keeps it up to 90 days only if its abuse systems flag it.
How long we keep it
What you send us through the form is kept in our database until you ask us to remove it. To have it removed, email [email protected] and we'll delete it. The email correspondence we send back stays in our inbox per our normal operational records.
We keep a copy of each email our system sends you for up to 180 days, or for up to two years once you have an account with us, and then delete the copy.
If you become a paying customer later, customer records are kept for as long as you have an account, plus the statutory retention period our jurisdiction requires.
Your conversations with Inky in your dashboard are kept with your account for as long as you have one. You can ask us to delete them at any time - email [email protected].
Your WhatsApp messages, the text of your voice notes and our replies are deleted 30 days after they were sent. If the change they are about is still open by then, we keep them until it is finished. Photos and files you send there are deleted 30 days after they arrive. The change request itself stays in your account.
We keep your WhatsApp number while it is connected. If you remove it from your dashboard, or your service with us ends, we delete the number and every message to or from it 30 days later, whether or not its change is finished. You can ask us to delete your WhatsApp messages sooner - email [email protected].
If someone attaches a file to an enquiry on a website we run for one of our customers, we send it to that customer, and to the people they have chosen to receive their enquiries, as a private download link, and the file is deleted 30 days after it arrives. The enquiry itself stays in that customer's account.
If we refund you by bank transfer, we keep the bank or UPI details you give us until 30 days after the refund is sent, and then delete them. We keep the last few characters and the payment reference, so the refund can be traced.
Anything we delete can stay in our backups, or recoverable in our file storage, for up to 30 days.
Who runs this
InkySites is a product of Riverbco Technologies Private Limited, registered in India. If you want a copy of your data, want it deleted, or want to ask us anything else about how we handle it, email [email protected].
Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top. Material changes that affect existing users will also be sent by email.