Privacy policy

darwaza is an AI website builder for small businesses. This page explains what we collect when you use darwaza, why we collect it, who processes it, how long we keep it and the choices you have. It covers this website and your account. The visitors of the sites you build are covered by your own site's notice (see "Your customers' data").

What we collect

• Your account: your email address and your password. Passwords are kept only in a form that cannot be read back.
• What you create: your chats with the builder, your plans, designs, brand brief and logo, and the content of your sites.
• Billing records: your plan, your payments and your receipts. Card details are typed on the payment gateway's own page; we never see or store them.
• Device and browser signals: to stop abuse, such as one person opening many accounts for free credits, we keep a device identifier and a few browser signals, only as keyed hashes: scrambled with a secret key, so the original values cannot be read back. We keep the last 5 devices of an account, and drop the records that link devices to accounts after 13 months.
• Network addresses: your IP address is used to limit how many requests and sign-ups come from one network. It is never stored as it is.
• Cookies: only to keep you signed in and to remember your language, your theme, whether the sidebar is folded, and your device identifier. There are no advertising cookies.
• Messages you send us: what you write through Contact us, with the name, email and phone you give.

Why we use it

• To run your account, and to build, host and change your sites.
• To bill you for paid plans and credits.
• To send the emails you need: verification codes, password resets, and notices about your builds and sites. You can turn the notices off from the link in each one.
• To keep the service safe: to prevent abuse, fraud and automated sign-ups.
• To answer you when you contact us.

We do not sell your data, and we do not use your sites' content for advertising.

Who processes it

Other companies help us run the service. They act on our instructions and only for these purposes:

• hosting and infrastructure providers, which run the platform and your sites;
• AI model providers, which receive your chats and your sites' content to plan, design and build them;
• an email delivery service, which sends our emails;
• the payment gateway you connect to your site, which handles your customers' payments under its own terms;
• the payment gateway we use for our own billing, which handles your payments to us.

How long we keep it

• Your account and your content: while your account is open. When you ask us to delete your account, we delete it and your sites, except billing records we must keep by law.
• Device signals: the last 5 devices of an account; links between devices and accounts are dropped after 13 months.
• Records of the emails we send: 90 days.
• Accounts that never verified their email and were never used are removed after 7 days.

Your choices

• Export: on paid plans, download your site's code and data at any time.
• Correction: change your details in your account, or ask us.
• Deletion: write to support@darwaza.ai to delete your account and your sites.
• Emails about your builds and sites: turn them off from the link in any of them. Account emails, such as verification codes, are always sent.

Your customers' data

Your site collects what you choose: orders, bookings, enquiries, registrations and sign-ups. You see and manage it in your site's admin, and you decide how you use it. Tell your visitors on your site how you use their data. We process it only to run your site for you.

Contact

Questions about this page: support@darwaza.ai. To report a security problem: security@darwaza.ai.