Before we start speaking legalese below, let's talk to you one on one. Our privacy policy basically states that we do not sell your information, whether it is your business information or your updates. We share it only with service providers that help us operate and improve this service, and only as described in this Privacy Policy. If you choose to connect your Google Analytics, Google Search Console, YouTube, or Blogger account, please also read the "Google User Data" section below, which explains what we access, how we use it, who we share it with, how we protect it, how long we retain it, and how you can disconnect, withdraw consent, or request deletion where applicable. If you choose to connect a Shopify store, please also read the "Shopify Store Data" section below, which explains what Shopify store data we access, how we use it, how we protect it, how long we retain it, and how you can disconnect or request deletion.

com.free takes your privacy very seriously, however, we also wish to explain that creating a website to be found, means you want to expose data to the world. Whereas this may include your customers, it also includes many other publics - who might not be excluded from viewing what you are talking about, just because you wish it so.

We list below what information we get from you and how we use it or may use it in the future. So with a pinch of realism and a whole lot of tech-safety measures, let's jump straight into the Tech-Legalities 101.

1. INFORMATION WE RECEIVE FROM YOU Registration information:

When you sign up and register with com.free, you are required to provide information such as your name, business name, business address, and mobile number. Business information you update: You can choose to update your business contact numbers, email addresses. You can also provide your business category and your brand identity including your business or brand logo. Moreover you can also upload images related to your business to the "Image Gallery". Public business updates: The regular messages you upload and share with the public to your "website" via com.free/dashboard (Manage-portal) using your credentials or through the com.free app, the image messages you post through Manage-portal or the com.free App

Other Information: We receive data about you whenever you use or are running com.free App or the Manage-portal, such as when you send or receive a message, seek analytics, update store information, click on, view or otherwise interact with things, or make purchases through com.free Store. When you post things like photos or videos on com.free, we may receive additional related data (or metadata), such as the time, date, and place you took the photo or video. We receive data from or about the computer, mobile phone, or other devices you use to install com.free app or to access Manage-portal, including when multiple users log in from the same device. This may include network and communication information, such as your IP address or mobile phone number, and other information about things like your internet service, operating system, location, the type (including identifiers) of the device or browser you use, or the pages you visit. For example, we may get your GPS or other location information so we can inform your customers or your potential customers that your business is nearby, or we could request device information to improve how our apps work on your device. We receive data whenever you visit an application, or website that uses the com.free platform or visit a site with a com.free feature (such as a 'discovery plugin'), sometimes through cookies. This may include the date and time you visit the site; the web address, or URL, you're on; technical information about the IP address, browser and the operating system you use; and, if you are logged in to com.free, your User ID.

2. PUBLIC INFORMATION

When we use the phrase "public information", we mean the information you choose to make public, as well as information that is always publicly available. By choosing to make it public, we mean, choosing to display certain information on your website.

Information you choose to make public

Choosing to make your information public is exactly what it sounds like: anyone landing on your website by com.free, either by typing the URL or coming through a search engine result click, will be able to see it.

Choosing to make your information public also means that this information: Can be associated with you (i.e., your displayed business name, business address, logo image, featured image, image gallery, message board, URL, page statistics, social sharing links, etc.)

Can show up when someone does a search on com.free or on a public search engine; Will be accessible to the com.free -linked business directory, applications, and websites; and Will be accessible to anyone who uses our APIs and internal search. When others share information about you, for instance sharing your website, or sharing a message you have posted on your website, using your social media options, they can also choose to make it public.

Information that is always publicly available The types of information listed below are always publicly available, and they are treated just like information you decided to make public: Displayed Business Name: This helps people search for your business. Business Description: Unless you specifically delete the business description, this will be publicly displayed. Business Contact Details: Your business contacts, which may include accurate business address, email address, mobile or telephone numbers and/or other website addresses. All Business updates: Any business updates (text, image or video) that you make and that appear on your website, are all in the public domain and searchable. Business Logo & Hyperlink: The logo file uploaded is always displayed for people to easily recognize your brand. The hyperlink to any other website you might own will always be displayed. Keywords: Auto generated Keywords will always be visible on your website.

3. HOW WE USE THE INFORMATION WE RECEIVE

We use the information we receive about you in connection with the services and features we provide to you and other users like your subscribed customers or potential customers who might want to subscribe to your website and its contents, our partners, the advertisers that purchase ads on the site, and the developers that build the applications, and websites you use. For example, in addition to helping people see and find things that you do and share, we may use the information we receive about you: As part of our efforts to keep com.free products, services and integrations safe and secure; To protect com.free' or others' rights or property; To make suggestions to you and other users on com.free, such as: suggesting what kind of messages to update or when to update them; and For internal operations, including troubleshooting, data analysis, testing, research and service improvement. Granting us permission to use your information not only allows us to provide com.free as it exists today, but it also allows us to provide you with innovative features and services we develop in the future that use the information we receive about you in new ways. While you are allowing us to use the information we receive about you, you always own all of your information. Your trust is important to us, which is why we don't share information we receive about you with others unless we have: Received your permission; Given you notice, such as by telling you about it in this policy; or Removed your name and any other personally identifying information from it. Of course, for information others share about you, they control how it is shared. We store data for as long as it is necessary to provide products and services to you and others, including those described above. Typically, information associated with your account will be kept until your account is deleted. For certain categories of data, we may also tell you about specific data retention practices. We may enable access to public information that has been shared through our services. We may allow service providers to access information so they can help us provide services.

4. GOOGLE USER DATA

Websites.co.in offers optional integrations with Google Analytics, Google Search Console, YouTube, and Blogger. If you choose to connect your Google account, this section describes what we access, why we access it, how we use it, who we share it with, how we protect it, how long we retain it, and how you can disconnect, withdraw consent, or request deletion where applicable. We access only the Google data necessary to provide the specific integration or feature you request. If you never connect a Google account, none of this applies to you.

What we access, and why
We access Google user data only after you explicitly authorize the requested permissions through Google's OAuth consent screen. We request only the permissions necessary to provide the features you choose to enable.
• See Google Analytics data (analytics.readonly) — to display visitor, traffic and engagement reports inside your dashboard.
• Manage Google Analytics properties (analytics.edit) — to create, configure or link a Google Analytics property and install the measurement tag on your website for you, so you do not have to perform these steps manually.
• See and manage Search Console data (webmasters) — to display search clicks, impressions, rankings, indexing status and related reports, submit your sitemap, and, where a Search Console property does not already exist for your domain, create a URL-prefix property on your behalf so data collection can begin.
• Verify site ownership (siteverification) — to verify ownership of your custom domain with Google, where required, so that Search Console features can be enabled.
• View your YouTube account (youtube.readonly) — to access the YouTube channel and video information necessary to create or update your Websites.co.in website and provide the YouTube import and synchronization features you request. This may include channel information such as channel name, handle, description, profile image or banner, and channel URL, and video information such as titles, descriptions, thumbnails, publish dates, duration, tags, categories, and other information available through the authorized YouTube API access that is necessary for the requested features. We use read-only access and do not upload, edit, delete, publish, rate, or comment on your YouTube content. We embed YouTube players and link to YouTube rather than downloading your video files.
• View your Blogger account (blogger.readonly) — to access the Blogger blogs and content you select for import, including blog name, URL, description, profile or blog image, posts, post content, publication or update information, labels or categories, and other information available through the authorized Blogger API access that is necessary for the requested features. We use this information only to provide the Blogger import and related website features you request. We use read-only access and do not publish, edit, or delete content in your Blogger account.
We use Google user data solely to provide the features you choose to enable within Websites.co.in and for no other purpose.

Who we share it with
We do not sell Google user data. We do not use it for advertising, to build advertising profiles, to serve personalized advertisements, or to train artificial intelligence or machine learning models. To generate the plain-language summaries and website improvement suggestions shown in your dashboard, we send only derived analytical information, such as your overall health score, category scores and the titles of detected issues, to our AI provider, OpenAI. If you configure your own Google Gemini API key in your account settings, the same derived information is sent to Google Gemini using your own API key instead of OpenAI. We do not transmit your Google account credentials, OAuth access tokens, refresh tokens, raw Google Analytics data, raw Google Search Console data, raw YouTube Data API data, raw Blogger API data, or complete Google API responses to any AI provider or any other third party. Google data accessed through these integrations is used only to provide the specific integration or feature you request and is not used for AI training or model development. Apart from the above, Google user data is disclosed only:
• to service providers that host, secure and operate our application on our behalf under appropriate contractual obligations; or
• where required by applicable law, regulation or a valid legal process.

How we protect it
All communication between your browser, Websites.co.in and Google is encrypted in transit using HTTPS/TLS. OAuth access and refresh tokens are stored securely on our servers and are accessible only to the application components that require them to provide the requested functionality. Google user data is accessed only as needed to provide the features you have enabled and only for the website associated with your authenticated account. One customer can never access another customer's Google data. Our employees do not routinely access Google user data. Access is permitted only where reasonably necessary to provide customer support, investigate technical issues, comply with legal obligations, or with your explicit permission. Reports retrieved from Google are stored in a short-lived cache for a maximum of 24 hours, after which they are automatically discarded and retrieved again only when needed.

How long we keep it, and how to remove it
We retain Google user data only while your Google account remains connected to Websites.co.in. You can disconnect Google Analytics and Search Console at any time from Analytics → Settings within your dashboard. You can disconnect YouTube or Blogger from Dashboard → Social, or revoke Websites.co.in's access through your Google Account's third-party connections or security settings. When you disconnect or revoke access, we stop using the corresponding connection and delete applicable access credentials and Google API-derived personal data in accordance with applicable Google API requirements, our retention procedures, and applicable data-protection law. When you disconnect:
• the stored OAuth access and refresh tokens are permanently deleted from our systems;
• any cached Google Analytics and Search Console reports are removed;
• the stored Analytics and Search Console property identifiers are deleted; and
• no further requests can be made to your Google account unless you reconnect it. YouTube and Blogger access tokens are kept only while the corresponding account remains connected to your website, so we can provide the import, refresh, and synchronization features you request. If you disconnect YouTube or Blogger, revoke Websites.co.in's access through your Google Account, or the connection otherwise becomes invalid, we stop accessing the connected account and delete the associated access credentials and applicable Google API-derived personal data in accordance with applicable Google API requirements, our data-deletion procedures, and applicable data-protection law. Temporary connection and import data associated with an unsuccessful connection or import attempt is automatically deleted according to our retention procedures. Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy or where retention is required or permitted by applicable law. Content that you independently create, upload, or substantially modify on your Websites.co.in website may be retained according to the retention provisions applicable to that content.
Where supported by the integration, we also revoke the connection with Google. If Websites.co.in installed a Google Analytics measurement tag on your website, it will also be removed when you disconnect the integration. You may also revoke Websites.co.in's access at any time from your Google Account's connected apps and services settings. You may request deletion of any remaining Google user data by contacting us at [email protected].

Purpose of Google Data Processing
We use Google data only for the specific integration or feature you request. For YouTube, this includes retrieving channel and video information to create or update your Websites.co.in website and to provide requested import or synchronization functionality. For Blogger, this includes retrieving the blogs and posts you select to create or update your Websites.co.in website. We do not use Google data for unrelated purposes.

Your Data Protection Rights
Depending on applicable law, you may have rights relating to your personal data, including the right to request access to information about its processing, correction or updating of inaccurate personal data, and erasure of personal data where applicable. Where processing is based on consent, you may also withdraw your consent. You may exercise applicable rights or submit a privacy or data-protection request using the contact or request mechanism described in this Privacy Policy. Withdrawal of consent does not affect processing that was lawfully carried out before withdrawal or any retention required or permitted by applicable law.

Google Data Deletion
When you disconnect or revoke a Google integration, we stop accessing the corresponding Google account and delete applicable Google access credentials and Google API-derived personal data in accordance with applicable Google API requirements and data-protection law. Where data has been processed by a service provider on our behalf, we take appropriate steps to require deletion of applicable data when deletion is required. Data that we are required or permitted to retain for a separate lawful purpose may be retained for that purpose.

Security of Google Data
We use reasonable technical and organizational safeguards designed to protect Google data and associated personal data against unauthorized access, disclosure, alteration, loss, or misuse. OAuth access and refresh tokens are protected and are not displayed to users or intentionally included in application logs. We limit access to Google data to systems and personnel that need it to provide the requested integration and apply appropriate retention and deletion controls.

Limited Use
Websites.co.in's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. SHOPIFY STORE DATA

Websites.co.in offers an optional Shopify importer that lets you create or update a Websites.co.in website from your Shopify store. If you install our Shopify app or connect your store, this section describes what we access through Shopify's APIs, why we access it, how we use it, who we share it with, how we protect it, how long we retain it, and how you can disconnect or request deletion. We access only the Shopify data necessary to provide the import and resync features you request. If you never connect a Shopify store, none of this applies to you.

What we access through Shopify's APIs
We access Shopify store data only after you authorize our app through Shopify's authorization and installation flow. We request only the read-only access scopes necessary for the features you use. Currently, these may include read_products, read_content, and, where configured and necessary, read_locales. The exact scopes requested are presented through Shopify's authorization flow and may change if the features we provide change. Depending on what you import, this may include:
• Shop profile — store name, primary domain, description, currency, and the shop contact email Shopify provides for the connected store, where available, to identify the store and set up your website. Where you create or match a Websites.co.in account through this flow, we may also use the shop owner name Shopify provides.
• Products — titles, descriptions, images, product type, tags, vendor, prices, and inventory availability information needed to publish products on your Websites.co.in site.
• Online Store content — published pages and blog articles, including titles, body HTML, publication information, and related images, needed to publish pages and posts on your Websites.co.in site.
Access is read-only. We do not create, update, or delete products, pages, blog posts, themes, orders, customers, checkout, or payment settings in your Shopify admin. We do not request Shopify customer or order access scopes, and we do not intentionally collect customer personal data, order history, or payment information through this integration.

What we collect directly from the merchant
When you use the importer, you may provide your Shopify store domain, such as mystore.myshopify.com, and use your Websites.co.in account to authorize and manage the connection. We may also keep limited operational information related to connection, import, and resync attempts, such as timestamps, status, and error codes, to operate, secure, troubleshoot, and support the feature. We do not ask merchants to upload lists of their customers' personal data for this integration.

How we use the information
We use Shopify store data only to:
• authenticate and maintain the authorized connection while you use the Shopify integration;
• preview the Shopify information available for import;
• import selected products, pages, and blog content into your Websites.co.in website;
• provide manual resync functionality when you request it;
• operate, secure, troubleshoot, and support the importer.
We do not sell Shopify store data. We do not use Shopify store data to create advertising profiles or for personalized advertising. We do not use Shopify store data to train artificial intelligence or machine learning models. Resync runs only when you manually initiate it from Websites.co.in; we do not use the connection to silently modify your Shopify store.

Who we share it with
Shopify store data and access credentials are disclosed only:
• to service providers that host, secure, maintain, and operate Websites.co.in on our behalf, where necessary to provide the requested features and subject to appropriate contractual and security obligations; or
• where disclosure is required by applicable law, regulation, court order, or other valid legal process.
We do not transmit Shopify access credentials or raw Shopify Admin API responses to advertising networks or AI providers. We do not sell Shopify store data or disclose it to third parties for their own advertising purposes.

How we protect it
Communication between your browser, Websites.co.in, and Shopify is encrypted in transit using HTTPS/TLS. Shopify access tokens and other authentication credentials are stored using appropriate security controls on our servers and are accessible only to application components that need them to provide the requested features. We limit access to Shopify store data to systems and personnel that reasonably need it for the purposes described in this section. We maintain logical separation between merchants' accounts and Shopify connections so that one merchant cannot access another merchant's Shopify connection or imported data through the application. Employee access is limited to what is reasonably necessary for support, security, legal compliance, or with your permission.

Retention, disconnect, and deletion
Shopify access credentials are kept only while your Shopify store remains connected to your Websites.co.in website and as otherwise necessary to provide the requested integration. You can disconnect the Shopify integration from Dashboard → Social, uninstall the app from your Shopify admin, or revoke the app's access through Shopify's available app-management controls. When you disconnect, uninstall, or the connection becomes invalid:
• we stop making Shopify API requests for that store;
• we disable the connection and delete or otherwise invalidate the stored Shopify access credentials according to our security and retention procedures;
• temporary connection, import, and failed-import data is deleted according to our retention procedures; and
• we process applicable Shopify privacy and deletion requests relating to data stored by our app.
Content that you have imported into and subsequently maintain as part of your Websites.co.in website, including products, pages, posts, and images, may be retained as your website content according to the retention provisions applicable to your Websites.co.in account and website, unless you delete that content or your account. You may request deletion of remaining Shopify connection data or applicable personal data by contacting [email protected]. Where Shopify sends a privacy or compliance request concerning data stored by our app, we process the request in accordance with Shopify's requirements and applicable law.

Shopify privacy and compliance requests
Shopify may send privacy or data-compliance requests concerning data stored by our app, including requests relating to a Shopify store or an individual. We process applicable requests we receive in accordance with Shopify's requirements and applicable data-protection law.

Purpose limitation
Shopify store data is processed only for the purposes described in this section, including importing and resyncing the Shopify content you request, operating and securing the integration, and providing related support. We do not use Shopify store data for unrelated purposes.

Data deletion
When Shopify connection data is no longer required for the purposes for which it was collected, or when deletion is otherwise required under applicable law or Shopify's privacy requirements, we take reasonable steps to delete or anonymize the applicable data, subject to any data we are required or permitted to retain for legal, security, fraud-prevention, dispute-resolution, or other lawful purposes.

No AI processing
We do not provide Shopify store data, Shopify access credentials, or raw Shopify API responses to AI providers, and we do not use Shopify store data to train or develop artificial intelligence or machine learning models.

Data protection rights and contact
Depending on applicable law, you may have rights relating to your personal data, including requesting access to information about its processing, correction or updating of inaccurate personal data, and erasure of personal data where applicable. Where processing is based on consent, you may also withdraw consent, subject to applicable law and any other lawful basis for continued processing. Merchants and other individuals may contact us at [email protected] for privacy questions or requests relating to the Shopify integration or their personal data. We will process applicable requests in accordance with applicable data-protection law and our legal obligations. Physical correspondence may be sent to our registered office address published on Websites.co.in's contact and legal pages.

6. DELETING AND DEACTIVATING YOUR ACCOUNT

If you want to stop using your service with com.free, you can get in touch with us to either deactivate or delete it. Deactivate Deactivating your account puts your account on hold. People searching for it online will no longer find it, but we do not delete any of your information. Deactivating an account is the same as you telling us not to delete any information because you might want to reactivate your account at some point in the future. Deletion When you delete your account, it is permanently deleted from com.free. It typically takes about one month to delete an account, but some information may remain in backup copies and logs for up to 180 days. You should only delete your account if you are sure you never want to reactivate it. Certain information is needed to provide you with services, so we only delete this information after you delete your account. In case you have any issues with the product, the same should be reported during the demo period during business hours. No refund requests will be entertained after moving to a paid subscription and invoice being sent. Customer support will be available for the duration of the subscription of the paid product. Any product of com.free does not guarantee: A specific amount of business. A specific position on any search engines in a specific amount of time. com.free is a marketing tool that helps your business get discovered online on search engines and get more business. It does not guarantee a specific search engine position or amount of business.

7. Third-Party Advertising

   We use third-party vendors, including Google, that use cookies to serve ads based on a user’s previous visits to this or other websites.
   Google’s use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet.