The short version
We collect what you give us when you submit your URL or contact us. We use it to send you a redesign and to talk to you about it. A few AI services help us do that work, and none of them trains its models on your data. If you connect your own AI assistant to your account, we get only what it sends us to act on, never your chats with it. We don't sell it, rent it, or pass it to third parties for marketing.
What we collect
When you send us your site through the form: the URL you paste (or, if you don't have a site yet, the link you give us and whatever you tell us about your business), the email address you give us, a WhatsApp or phone number if you add one (with the country you pick beside it), the style you pick, any files you attach, and basic technical metadata like the timestamp and a hashed version of the IP address your browser came from. We use the phone number only to get in touch with you about your redesign.
If you add your WhatsApp number on the form, we message you there about that request: once to confirm it, once when your site is ready, and once more a few days later. We keep a note of when you agreed to that and of the wording you saw. Reply STOP and we won't message you there about it again. Anything you send back is read by a person on our team, and those messages, and ours, are kept and deleted on the same terms as your WhatsApp messages would be as a customer, below.
If you press "Continue with Google" on the form instead of typing your email address, Google tells us the email address and name on your Google account, and that the address is yours. We use the address exactly as if you had typed it, and the name to greet you. We ask Google for nothing else, and we get no access to your Google account, your inbox or your contacts. When Google itself runs your mailbox (a Gmail address, or one on Google Workspace), that is enough for us, and we don't email you asking you to confirm the address. For any other address we still do.
The dashboard's sign-in page has the same "Continue with Google" button. Pressing it tells us the same two things, and we use the address only to find your account and sign you in. While you're on that page your browser holds a short-lived cookie of ours, which makes sure the sign-in Google hands back is used once, in that browser. It is deleted when you sign in, and expires within the hour if you don't.
If you become a paying customer later, we'll also process the billing details required to charge you. Card data lives with our payment processor, not with us.
If you have an account with us and ask Inky a question in your dashboard, we keep your messages and Inky's answers with your account.
If you connect a WhatsApp number, we keep the number, the account id WhatsApp gives us for it, and when and from which signed-in account it was connected. We also keep the messages, photos and files you send us there, the text of your voice notes (never the audio), and our replies.
If you connect a Google Sheet from your Enquiries page, Google asks you to let InkySites use only the sheets you choose there or that we make for you. We use that access for one thing: writing your website's enquiries into that sheet. We read only the sheet's name, its time zone, its tab names, and the first row and reference column of the tab we write to, never your other tabs or anything else in your Google Drive. We keep Google's permission encrypted and delete it when you stop sending or close your account, and you can remove InkySites at any time from your Google Account's connected apps. InkySites' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you choose to keep a copy of your website in your Google Drive from your account page, Google asks you to let InkySites use only the files it makes for you. We use that access for one thing: putting a copy of your website, as a zip, into one folder we make in your Drive, and removing our older copies from that folder so only the newest few stay. We never read or list anything else in your Drive, and a copy you move out of that folder is left alone. We keep Google's permission encrypted and delete it when you stop copying or the copying stops, and you can remove InkySites at any time from your Google Account's connected apps; the folder and its copies stay yours either way. InkySites' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we track
We run Google Analytics on this site. We also remember which ad or link brought you here (the campaign tags and click id in the URL) for the length of your visit, and send that along with your form, so we know which ad produced the enquiry.
Once you confirm your email address, or sign in with Google on the form, we tell the advertising platform that brought you here that the enquiry was real, so we know which ad worked. To Google we send only the click identifier from the link you arrived on, and the date, never your email address. Reporting to Meta would additionally use a one-way hashed version of your email address, never the address itself, together with your website address; that reporting is switched off.
The emails we send you carry a tiny invisible image. When your email app loads it, our email service, Resend, tells us that the email was opened and when. If your email app doesn't load images, we never learn that.
If you're in the EEA, the UK or Switzerland, we deny advertising and analytics storage by default and it stays that way, so nothing here sets a cookie for those purposes and there is nothing to ask you about. We don't advertise in those regions.
On the websites we run for our customers, our servers log each visit, as every web server does: the page asked for, the time, the address of the page that sent the visitor, and the visitor's IP address and browser. We keep those logs for 30 days and use them to count our customers' visitors, leaving out bots. We also keep a record of each time a visitor taps a link to call, message, email or find one of our customers: which link, on which page, the page they arrived on, and the name of the website that sent them there, if any. That record itself holds no IP address or anything else about the visitor, and it is kept with the customer's account. When a visitor sends a message through one of our customers' contact forms, we note the same two things on that message: the page they arrived on, and the name of the website that sent them there, if any. We match the two with a random code the page makes each time it loads, which is not about the visitor and is not kept in their browser. Counting these sets no cookie and stores nothing in the visitor's browser.
We don't sell or rent your data, and none of these services get it for their own marketing.
Who handles the form for us
We use a small handful of services to receive and act on what you submit. None of them get your data for their own purposes.
- Cloudflare Turnstile: the bot check above the submit button. Cloudflare receives anonymous signals from your browser so we can tell humans from scripts.
- Google Sign-In: the "Continue with Google" button on the form. Your browser loads it from Google when you start filling the form in, and if you press it, Google handles the sign-in and tells us your email address and name.
- Cloudflare Workers: the endpoint your submission goes to. It runs the bot check and the rate limiting, then passes the submission on to us.
- Google Cloud Run: our own application, which receives it.
- Google Cloud SQL: the database your submission is stored in. Managed Postgres, running in Google Cloud's us-central1 region (Iowa).
- Google Cloud Storage: where any files you attach to the form are kept.
- Resend: the email service that pings us when a submission comes in. The notification routes through Resend (Amazon SES infrastructure, us-east-1).
The AI services that help us
We use AI models to build your redesign, to make the changes you ask for, and to answer the questions you ask Inky in your dashboard. Each one receives only what its part of the job needs. None of them uses your data to train its models, and none gets it for its own purposes.
- Anthropic (Claude): builds your redesign and makes your changes. It receives your current website's public pages, what you told us in the form or in a change request (from your dashboard or on WhatsApp), and the files you send us. When you ask Inky a question in your dashboard, it also receives your message, the pages of your own site it reads to answer you, and the account details the answer needs, such as your plan and the changes you have in progress. Anthropic deletes this within 30 days, unless its safety systems flag something, in which case it can keep that part for longer.
- OpenAI and Google (Gemini): image models we use to improve your photos and your logo: sharpening a low-resolution photo, correcting its lighting, extending it to fit its space on the page, or redrawing a logo cleanly. They receive only the image being worked on and our instructions for it. OpenAI deletes it within 30 days, and Google keeps it only for a limited time, to watch for misuse.
Who handles WhatsApp for us
These services handle your WhatsApp messages with us.
- Meta (WhatsApp Business Platform): carries the messages between you and us, as our data processor. Meta says it keeps message content for up to 30 days to deliver it, and photos, files and voice notes for 30 days. We can't make Meta delete its copy sooner.
- Google (Gemini, on Google Cloud's Vertex AI): turns your voice notes into text. It receives only the audio, and doesn't train its models on it. It may cache the audio in memory for up to 24 hours, and keeps it up to 90 days only if its abuse systems flag it.
If you connect your own AI assistant
You can connect your own Claude or ChatGPT to your InkySites account and ask it to change your website. You start the connection from your assistant, then sign in to your InkySites dashboard and press Allow, choosing which of your sites it may work on. We accept connections only from Claude (claude.ai) and ChatGPT (chatgpt.com), and we email you whenever a new one is made.
Once connected, your assistant can:
- read the pages of the sites you chose, your open changes on them, and any question we have asked you about one
- see your visitor numbers and how many enquiries your site received, but never what an enquiry says
- send us a change request, which Inky, our AI, then makes, exactly as if you had sent it from your dashboard
- pass on your answer to a question we asked you
- give you a one-time link for sending us photos and files
- publish a change straight to your live site, but only if you switched that on for that assistant in your dashboard and asked for it for that change. Otherwise every change waits as a preview until you press Publish.
It cannot see or change your plan or your payments, and it cannot read your enquiries.
We receive only what your assistant sends us to act on: your request or your answer, and which site or change it is about. We never receive your chat history, your assistant's memory, or files you attach in the chat. Your conversation with Claude or ChatGPT is between you and Anthropic or OpenAI, under their own privacy policies.
What we keep:
- the connection itself: which assistant, who allowed it, which sites, when it was made and last used, and when and how it ended. It stays with your account as the record of what was connected.
- the change requests and answers it sends, kept like the ones you send from your dashboard
- a log entry for each request it makes: which action, on which connection, whether it worked and how long it took. Never your words, and never what we sent back.
- the keys your assistant uses to reach us, only in scrambled one-way form, deleted by a routine cleanup once they expire or are replaced. When it gives you a photo link, the request that came with it is kept with the link, and deleted by the same cleanup after the link expires.
Like every web server, ours also keep a standard technical record of each request, such as its time and the network address it came from.
You can disconnect an assistant at any time from AI assistants on your dashboard's Account page. It stops working at its next request, and a change it sent to go straight live that hasn't been published yet waits as a preview instead. We never sell any of this, and none of it is used to train AI models.
How long we keep it
What you send us through the form is kept in our database until you ask us to remove it. To have it removed, email hello@inkysites.com and we'll delete it. The email correspondence we send back stays in our inbox per our normal operational records.
We keep a copy of each email our system sends you for up to 180 days, or for up to two years once you have an account with us, and then delete the copy.
If you become a paying customer later, your customer records are kept for as long as you have an account, plus the statutory retention period our jurisdiction requires.
Your conversations with Inky in your dashboard are kept with your account for as long as you have one. You can ask us to delete them at any time: email hello@inkysites.com.
Your WhatsApp messages, the text of your voice notes and our replies are deleted 30 days after they were sent. If the change they are about is still open by then, we keep them until it is finished. Photos and files you send there are deleted 30 days after they arrive. The change request itself stays in your account.
We keep your WhatsApp number while it is connected. If you remove it from your dashboard, or your service with us ends, we delete the number and every message to or from it 30 days later, whether or not its change is finished. You can ask us to delete your WhatsApp messages sooner: email hello@inkysites.com.
If someone attaches a file to an enquiry on a website we run for one of our customers, we send it to that customer, and to the people they have chosen to receive their enquiries, as a private download link. We keep the file for as long as we host that customer's website and delete it when we stop, or sooner if the customer asks us to. The enquiry itself stays in that customer's account.
If we refund you by bank transfer, we keep the bank or UPI details you give us until 30 days after the refund is sent, and then delete them. We keep the last few characters and the payment reference, so the refund can be traced.
Anything we delete can stay in our backups, or recoverable in our file storage, for up to 30 days.
Who runs this
InkySites is a product of Riverbco Technologies Private Limited, registered in India. If you want a copy of your data, want it deleted, or want to ask us anything else about how we handle it, email hello@inkysites.com.
Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top. If you are an existing user, we'll also email you about any material change that affects existing users.