Privacy Policy

1Who We Are

Webknown ("we", "us") is a digital studio run by Saurabh Kumar Srivastava from Street 35, Sector 9/D, Bokaro Steel City, Jharkhand 827009, India. We decide how the personal data described here is used, so under India's Digital Personal Data Protection Act, 2023 we are the "Data Fiduciary" for it.

This policy covers www.webknown.in (including the client dashboard, live chat, booking page and free tools) and the personal data you share with us while we work together. It does not cover websites we build for clients — each of those needs its own policy.

2What We Collect

A. What you give us. We only receive what you choose to enter. Depending on which part of the site you use:

• Contact form: Name, email address, WhatsApp number, the service you're interested in, your message, and whether you ticked the optional box to receive tips by email.
• Quote forms on our service pages: Name, WhatsApp number and country code, email address if you give one, project type, budget, timeline and project details.
• File uploads on the Get a Quote page: The files you choose to upload (for example a brief, logo or footage), plus the name you enter.
• Doctors Launchpad form: Name, specialty, clinic name, city, the plan you're interested in, email address, WhatsApp number and any notes.
• Booking a free call: Name, email address, phone number (optional), what you'd like to discuss and the time slot you pick.
• Live chat: Name, email address, phone number, your messages and any images you send in the chat. If we invite you to chat while you browse, your messages, the pages you viewed during that visit and its approximate city (see section 2B).
• Website review offer and "get help" buttons on our free tools: Name, an email address or phone number, any message you add, and a short summary of what you used the tool for (for example, the options you picked in the website cost calculator or the page you previewed). Otherwise our tools run in your browser and the image tools never upload your images. The one exception is Meta Tag Preview, which fetches the page address you enter through our server; we log only that website's domain name, for troubleshooting.
• Blog comments: Name, email address and your comment. Your name and comment are published after we approve them; your email address is stored separately and never shown.
• Service quiz: Your answers and the suggested service. No contact details.
• Client accounts: Name, email address, phone number and password when you sign up (or your name, email address and profile photo from Google if you sign in with Google), plus anything you add to your profile (address, a short bio). While we work together, your account also holds your orders, service requests, payment milestones and invoices. Your password is handled by our login provider, Supabase; we never see it.

B. What your browser sends automatically. Like every website, ours receives your IP address, browser and device type, and the pages you request. Our host keeps this in short-lived server logs to run and protect the site. If you accept analytics cookies, Google Analytics also records how you use the site (see section 5). Some forms run a Cloudflare Turnstile check, which looks at signals from your browser to tell people from spam bots.

Live visit counter. While a page of this site is open and on screen, your browser sends our server a small signal when the page opens, each time you move to another page, at regular intervals (normally every 30 seconds) while it stays on screen and you have used it in the last 10 minutes, and once when you leave. It contains a random code made for that browser tab (your browser forgets it when you close the tab; our copy is deleted with the visit record after 30 days, see section 6), the page address without any query string, how long the page has been on screen, the website that sent you (domain only) and campaign tags, your device type, browser and operating system, and an approximate city, state or region and country that our host works out from your IP address at that moment. We don't store your IP address or set a cookie, and the counter never asks for or records your name. It never runs on the sign-in, account or admin pages, and it is switched off if your browser sends Global Privacy Control. Declining analytics cookies does not switch it off, because it uses no cookies (see section 5).

Chats we open while you browse. If we open a chat with you during a visit (see section 3), that chat is linked to the visit, so we can see the pages you viewed in it, and it is labelled "Website visitor" with the visit's approximate city when our host could work one out. If you reply, your messages are shared with us together with that visit. The visit record itself is still deleted after 30 days, but the chat, including its city label, is kept like any other chat (see section 6), even if you never reply.

C. Business outreach. We sometimes contact businesses we think we could help. For that we keep business contact details that the business itself has published (for example on its website or Google listing): the contact name, business name, city, phone, email address and website, plus notes on our conversation.

3How We Use It

• To answer you: Replying to your enquiry, preparing a quote and calling you back — usually on WhatsApp or email.
• To run your project: Delivering the work, keeping your client dashboard up to date and issuing invoices.
• To confirm things by email: An automatic receipt after some forms, booking confirmations, a reminder about an hour before a booked call, and account emails (such as email verification and password reset).
• To alert us quickly: When you send an enquiry, book a call or start a chat, Saurabh gets an instant alert on his phone so we can reply fast (through our own admin app, and see Telegram in section 4).
• To keep the site safe: Blocking spam and abuse, for example by limiting how often one connection can submit a form.
• To improve the site: Counting visits and the pages people use, with our visit counter (it uses no cookies and does not depend on the cookie banner, see section 2B); Google Analytics only if you accept analytics cookies.
• To offer help while you browse: While you are on the site we may open a chat with you, for example if you spend time on a pricing or quote page. It appears in the chat box on the page, and you can ignore it or end it at any time.
• Business outreach: Contacting businesses as described in section 2C. You can tell us to stop at any time (see section 8).
• To meet legal duties: Keeping invoices and payment records as Indian tax law requires, and responding to lawful requests from authorities.

We do not sell or rent your data, we do not show ads or use advertising trackers, and we do not make automated decisions about you.

Tips by email. The contact form has an optional box for occasional tips by email. We only record that you ticked it; we don't send any regular or bulk email today. If we start, we'll only email people who ticked the box, and you can opt out at any time by replying to any email from us or contacting us (see section 11).

4Services That Process Your Data

We are a small team, so we rely on these established providers ("Data Processors"). Each one only gets the data it needs to do its job for us:

• Vercel: Hosts the website and runs its server code. Processes every request, including IP addresses in server logs, and works out an approximate location from your IP address for our visit counter.
• Supabase: Our database, login system (including account emails such as verification and password reset) and file storage. Stores form submissions, bookings, chats (including images sent in chat), blog comments, quiz answers, visit counter records, accounts, orders and invoices.
• Resend: Sends our emails: form receipts, booking confirmations and reminders, and the notification emails we receive about your enquiry.
• Telegram: Delivers the instant alert to Saurabh's phone when you send an enquiry, book a call or start a chat. The alert contains what you entered, such as your name, contact details and message.
• Google: Gmail is the inbox where our enquiry notification emails arrive. Google Analytics measures site usage (only with your consent). Google Drive stores files you upload on the Get a Quote page. Our booking page checks our own Google Calendar for busy times, so it doesn't offer slots when we're unavailable. If you choose "Sign in with Google", Google confirms your identity to us.
• Cloudflare (Turnstile): Runs the anti-spam check on some forms and receives your IP address and browser signals to do so.
• Cloudinary: Serves many of the images and videos on our pages. Your browser loads them straight from Cloudinary, so it receives your IP address and browser details, as any image host would.
• Fontshare (Indian Type Foundry): Serves the typefaces this site uses. Your browser loads them from Fontshare on every page, so it receives your IP address and browser details, as any font host would.
• WhatsApp (Meta): If you message us or we call you on WhatsApp, WhatsApp's own privacy policy applies to that conversation.

Several of these providers store data on servers outside India. We only use providers that protect data with encryption and access controls. We may also disclose data if the law requires it, or to protect our rights in a legal dispute.

5Cookies & the Consent Banner

Essential storage (always on). These make the site work:

• Login cookies: Set by Supabase when you sign in to your account or start a live chat, to keep you signed in.
• Your cookie choice: Saved in your browser so we don't ask again on every page.
• Small preferences in your browser: Your open chat, whether you've already seen our website review offer, and the history of the UTM Builder tool. These stay in your browser; the UTM history is never sent to us.
• Visit code: A random code for the current tab, kept in session storage, which your browser deletes when you close the tab, used only by our visit counter (section 2B). If we open a chat with you, that chat's access code and messages are kept the same way. If the counter has been paused or switched off for your browser, a note of that is also kept in your browser's storage; it is never sent to us.

Analytics (only if you accept). We use Google Analytics with Google Consent Mode. Until you click "Accept All", analytics storage stays switched off: Google Analytics sets no cookies and can only receive basic, cookieless signals (such as a page view without an identifier). If you accept, it sets its own cookies (names starting with _ga, lasting up to 2 years) so it can recognise repeat visits. If you click "Decline", it stays switched off.

Declining analytics cookies stops Google Analytics from setting cookies (it then receives only the cookieless signals described above). Our visit counter uses no cookies and does not identify you by name, so the banner does not affect it; it is switched off if your browser sends Global Privacy Control.

To change your choice at any time, use the Cookie settings link at the bottom of every page (or this one) to reopen the banner. You can also block cookies in your browser, but you won't be able to sign in or use live chat without the essential ones.

6How Long We Keep It

• Enquiries, quote requests, bookings, chats and outreach records: Up to 2 years after our last contact with you, unless you become a client. Then we delete them.
• Client accounts and project records: For as long as your account is open, and up to 2 years after our last project together.
• Invoices and payment records: For as long as Indian tax and accounting law requires us to keep them.
• Uploaded files: Until the project they belong to is finished, then deleted within 6 months.
• Blog comments: Until you ask us to remove them, or we take the post down.
• Analytics data: Google Analytics keeps user-level data for the retention period set in our account, which is never more than 14 months.
• Server logs: Kept briefly by our hosting provider for security and troubleshooting.
• Visit records: Detailed records from our visit counter, and the alerts the counter itself raises (for example when someone stays on a pricing page), are deleted after 30 days; after that we keep only daily totals per page, source, device, city and country. A chat we open with you while you browse is a chat, not a visit record: it is kept as the first item above says, even if you never reply, and its label keeps any approximate city the visit had.
• Our alert feed: The alerts in our own admin app about enquiries, bookings, comments and chats show your name (or, for a chat, the email address you gave), the time of a booked call, and the start of a chat message you send. The alert that you opened a chat we started shows that chat's label, including any approximate city in it. These alerts are deleted after 90 days, and cleared as soon as we delete the enquiry, booking, comment or chat itself.

If you ask us to delete your data sooner, we will, except where the law requires us to keep it.

7Data Security

The site runs only over HTTPS. Our database uses access rules designed so each client sees only their own account and only Webknown's admin sees enquiries. Chat images and invoices are stored privately and opened through short-lived links. Blog commenters' email addresses are kept apart from the public comments. No system is perfectly secure, though. If a breach ever affects your data, we will tell you and the authorities as the law requires.

8Your Rights

Under India's Digital Personal Data Protection Act, 2023, you can:

• See your data: Ask for a summary of the personal data we hold about you and who we've shared it with.
• Correct it: Ask us to fix anything that's wrong or out of date. Clients can also edit their profile in the dashboard.
• Delete it: Ask us to erase your data, or to close your account.
• Withdraw consent: Change your analytics choice (see section 5), or ask us to stop using data you gave us. This doesn't affect what we did before you withdrew.
• Stop outreach: If we contacted you about our services and you'd rather we didn't, reply "stop" to that message (or tell us any other way). We'll stop contacting you and remove your details from our outreach list.
• Nominate someone: Name a person who can exercise these rights for you if you die or become unable to.
• Complain: Raise a grievance with us (see section 11). If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

To use any of these rights, contact us using the details in section 11. We may ask you to confirm it's really you before we act. We'll reply within 30 days.

9Children

Our services are for businesses and adults. We don't knowingly collect data from anyone under 18. If you think a child has sent us their details, contact us and we'll delete them.

10Changes to This Policy

When our services or the law change, we'll update this page and the "Last updated" date below. If a change significantly affects how we use data you've already given us, we'll tell you directly before it takes effect.