1. Who is responsible for your information
SiteFueler is the trade name under which Dhanush R S carries on business as a sole proprietor in India. For personal information collected through SiteFueler.com and its direct commercial operations, Dhanush R S trading as SiteFueler acts as the data controller or data fiduciary because SiteFueler determines why and how that information is processed.
Correspondence address: Puttur Taluk, Dakshina Kannada District, Karnataka, India – 574210. Privacy and grievance contact: admin@sitefueler.com. Customer support: help@sitefueler.com.
When we work on a client’s website and handle personal information solely on that client’s documented instructions, the client normally acts as controller and SiteFueler acts as a processor or service provider. Those activities are additionally governed by the applicable project agreement and Data Processing Terms.
2. Scope
This policy covers SiteFueler.com, customer accounts, checkout, product downloads, support, comments, reviews, privacy requests, newsletters, marketing choices and professional-service interactions controlled by SiteFueler. It does not govern an independently operated client website or a third-party website, product or service linked from SiteFueler. Those parties provide their own privacy information.
3. Information we collect
Information you provide
- Account and identity data: name, display name, email address, password in hashed form, company, country, state, phone number, preferred currency, account role, registration date and verification status.
- Social-login data: if enabled and selected, a Google or GitHub account identifier, email address, name, profile image URL and connection metadata supplied by that provider.
- Order and billing data: purchased items, order number, customer name, billing email, country, state, phone number, currency, coupon, totals, tax information where applicable, order notes, invoice data and acceptance records.
- Payment data: gateway selected, transaction and provider reference numbers, amount, currency, payment status, fraud or verification results, provider responses and payment-event/webhook records. SiteFueler does not intentionally store complete card or online-banking credentials.
- Support and inquiry data: subject, messages, contact details, related order or product, category, status and files you choose to upload.
- Service-project data: project requirements, website credentials you choose to share, meeting communications, proposal and approval records, project files, invoices and deliverables.
- Public contribution data: comment or review text, rating, chosen public name, report reasons and any reply. Published contributions can be viewed and copied by other people.
- Marketing data: subscription choice, email or WhatsApp consent, campaign interaction and opt-out history.
- Privacy and legal requests: request type, identity and verification information, correspondence, status, result and evidence needed to respond.
Information collected automatically
- IP address, browser, operating system, device category, user agent, language, date and time, requested URL, referring page, security events and server logs.
- Account, download and transaction activity, including download count, token expiry, product version and entitlement history.
- Cookie, consent, session and analytics identifiers. Analytics identifiers are used only after applicable consent; limited non-identifying aggregate event totals may be recorded without an analytics identity.
- Approximate country or network information when an optional location feature is enabled.
Information from other sources
We may receive transaction information from PayPal or PhonePe; account information from Google or GitHub when you choose social login; traffic and consent information from Google Analytics and our consent mechanism; security and network information from Cloudflare and MilesWeb; communications from WhatsApp, Google Meet or Zoom when you use those channels; and referral information from an affiliate or advertising partner.
4. Browser-based tools
SiteFueler’s free WordPress tools are designed to process entered values and selected files inside your browser. The tools plugin does not intentionally upload that tool input to SiteFueler, store it in the WordPress database, or place it in cookies, local storage or session storage. Generated JSON, images or ZIP files remain in your browser until you download them or close the page.
The surrounding webpage still makes an ordinary request to our hosting and security infrastructure, which may produce standard IP, request and security logs. Embedded content and analytics will follow your applicable cookie choices.
5. Why we use information and our legal grounds
| Purpose | Typical data | Ground relied upon |
|---|---|---|
| Provide accounts, checkout, products, downloads, invoices, support and contracted services | Account, order, billing, transaction, download, support and project data | Performance of a contract or steps requested before a contract |
| Authenticate users and secure the website | Credentials, IP, device, activity, session and security data | Contract, legitimate interests, security obligations and applicable law |
| Maintain tax, accounting, dispute and transaction records | Orders, invoices, payments, refunds and acceptance evidence | Legal obligations and legitimate interests |
| Answer inquiries, moderate content, prevent abuse and improve support | Messages, attachments, comments, reviews, reports and activity records | Contract, requested service and legitimate interests |
| Measure website use and improve performance | Consent identifier, analytics session, page and interaction data | Consent where required; limited essential measurement only where law permits |
| Send newsletters, offers or WhatsApp marketing | Contact details, marketing preferences and campaign engagement | Consent or another permission specifically allowed by applicable law |
| Display advertising, affiliate links or external media | Cookie/device and interaction data as configured | Consent where required and legitimate commercial interests for contextual disclosures |
| Establish, exercise or defend legal claims and respond to authorities | Relevant account, transaction, communication and security data | Legal obligations and legitimate interests |
Where we rely on consent, you may withdraw it prospectively without affecting processing already performed lawfully. Refusing optional analytics or marketing consent will not prevent access to ordinary public content or a completed purchase. Certain account, payment and security information is necessary to provide the service and cannot be treated as optional.
6. Who may receive information
We do not sell or rent personal information. We may disclose limited information to the following recipients for the stated purpose:
- Authorized SiteFueler assistants and contractors who need limited access to operate the website, respond to support, or deliver an agreed service and who are required to protect confidentiality and use the information only for authorized work.
- MilesWeb for hosting, server operations, business email and infrastructure backups.
- Cloudflare for DNS, content delivery, TLS, performance and security.
- PayPal and PhonePe for payment initiation, verification, fraud prevention, settlement, refunds and disputes.
- Google Analytics after applicable consent, to measure website usage and performance. Google explains its processing on its official partner sites and apps page.
- Google/YouTube when you choose Google login, view an enabled YouTube embed, or join a Google Meet, subject to the official Google Privacy Policy.
- GitHub when you choose GitHub social login.
- Meta/WhatsApp when you contact us through WhatsApp or opt in to WhatsApp communications.
- Zoom when a project discussion is arranged through that platform.
- Email-delivery, backup, security, professional-adviser, analytics, advertising or affiliate providers added and disclosed as our operations evolve.
- Courts, regulators, tax authorities, law enforcement, fraud-prevention bodies, or a successor to the business where disclosure is legally required or reasonably necessary.
Third parties act under their own terms for activities they independently control. A payment provider, social-login provider or external website may therefore be an independent controller of information it receives.
7. International processing
SiteFueler is based in India and serves customers internationally. Providers such as Cloudflare, Google, PayPal, GitHub, Meta and Zoom may process information in India, the United States or other countries in which they or their subprocessors operate. Privacy protections can differ from those in your country.
Where a transfer mechanism is required, we will use an available lawful mechanism such as an adequacy decision, approved contractual clauses, a service provider’s recognized transfer framework, or another permitted safeguard. A client project may specify additional transfer restrictions.
8. How long we keep information
| Record | Normal retention approach |
|---|---|
| Account and profile | While the account remains active, then deleted or anonymized following a valid request, subject to retained transaction, security and legal records. |
| Orders, invoices, payments and refunds | At least the period required by tax, accounting, consumer, fraud and dispute laws; normally up to 8 years unless a longer matter is pending. |
| Payment webhook and audit records | Normally at least 1 year and longer where tied to accounting, fraud, chargeback or legal requirements. |
| Download and security logs | Normally 1 year, unless a security investigation, fraud issue or legal claim requires longer retention. |
| Analytics event data | Normally up to 14 months for Google Analytics or the shorter production setting; local aggregated or pseudonymous measurements normally no longer than 1 year unless further anonymized. |
| Support ticket messages | Kept while needed for support history, product quality, disputes and legitimate business records; periodically reviewed for anonymization or deletion. |
| Support attachments | Up to 180 days after the ticket closes, then deleted unless needed for an ongoing issue, dispute, security investigation, fraud prevention or legal obligation. |
| Email delivery logs | Normally 30 days for routine transactional diagnostics; important customer or legal correspondence may be retained with the related record. |
| Marketing subscription and suppression | Until opt-out; a minimal suppression record may be kept to honor the opt-out. |
| Privacy requests and grievances | As long as needed to prove and administer the request, normally 3 years after closure unless law or a dispute requires longer. |
| Professional project records | For the project and a reasonable warranty, accounting, portfolio, dispute and legal period under the project agreement. |
Backups rotate on a separate schedule. Deleted information may remain in a protected backup until that backup expires and will not be restored for ordinary use. We may retain de-identified or aggregated information that can no longer reasonably identify a person.
9. Security
We use measures appropriate to the nature and scale of the service, including TLS, access controls, password hashing, signed download links, private support-file storage, logging, Cloudflare protections, hosting security, backups and payment processing by specialist providers. Access is limited to people and providers who need it for an authorized purpose.
No internet service can promise perfect security. You are responsible for using a unique password, protecting account access, maintaining secure copies of downloads, and avoiding sensitive credentials or unnecessary confidential material in tickets. Report a suspected vulnerability through our Responsible Security Disclosure Policy.
10. Your privacy rights
Depending on where you live and subject to legal exceptions, you may have rights to:
- know whether and how we process your personal information;
- request access to or a portable copy of certain information;
- correct inaccurate or incomplete information;
- request deletion, restriction or anonymization;
- object to certain processing or withdraw consent;
- opt out of marketing, targeted advertising, sale or sharing where applicable;
- complain, appeal a decision, or contact an applicable privacy authority; and
- receive equal service and pricing when exercising a privacy right, subject to legitimate differences permitted by law.
Use the My Account privacy-request feature or visit Privacy Requests. We may verify your email, account, order details or identity to prevent unauthorized disclosure or deletion. An authorized representative may be required to prove authority. We will explain a refusal or partial response where law permits.
India
Users may request access to information about processing, correction or erasure, withdraw consent, nominate another individual where legally available, and raise a grievance. We will retain information that must remain for legal, security, contractual or claim purposes.
European Economic Area and United Kingdom
Where GDPR or UK GDPR applies, users may also request restriction, portability, object to legitimate-interest processing, and complain to their local supervisory authority. Required contract or legal processing does not depend on consent.
California and other United States jurisdictions
If an applicable US privacy law covers SiteFueler, residents may receive the rights required by that law. SiteFueler does not currently sell personal information. Any use of cross-context behavioral advertising or legally defined “sharing” will be consented to or made opt-outable as required. We will update this statement if our practices change.
11. Marketing and communication choices
Transactional messages—such as verification, receipts, download information, security notices and support updates—are part of the requested service and are not promotional newsletters. Promotional email or WhatsApp messages will use an appropriate opt-in or other lawful permission and will include a practical way to stop.
Unsubscribing from marketing does not stop necessary account, purchase, support, security or legal messages. The address notifications@sitefueler.com is an automated sender and does not accept replies.
12. Comments, reviews and public content
A comment, review, rating, chosen public name, avatar or SiteFueler response may be publicly displayed. Do not publish private information, credentials or material you lack permission to share. We may moderate or remove spam, abuse, illegal content, deceptive reviews or material that violates our Acceptable Use Policy. Search engines and third parties may retain copies even after we remove public content.
13. Children and young people
Public educational content may be browsed by people of different ages. A person must be at least 18 to independently create or control a purchasing account, place a paid order, or contract for professional services. If a person under 18 wishes to obtain a paid product or service, a parent or legal guardian must control the account and transaction, review the terms, provide any legally required consent, and supervise the use.
We do not knowingly solicit sensitive personal information from children or intentionally direct behavioral advertising at children. A parent or guardian who believes a child supplied personal information without appropriate involvement may contact admin@sitefueler.com.
14. Cookies, embeds and third-party links
Essential cookies support accounts, carts, currency, login security and checkout. Optional analytics, advertising and embedded-media technologies are controlled through applicable consent choices. YouTube or another external embed may allow its provider to receive IP, device, cookie and interaction information when activated. See the Cookie Policy.
External websites and affiliate destinations have their own privacy practices. A link is not a promise that SiteFueler controls or endorses every external privacy practice.
15. Personal-data incidents
We investigate suspected incidents, take reasonable containment and recovery steps, preserve necessary evidence, and notify affected individuals and authorities when applicable law requires it. A notice may describe the nature and likely consequences of the incident, measures taken, protective steps you can take, and how to contact us.
16. Official privacy resources
These official sources provide additional information about regional privacy rights. They do not replace this Policy or determine whether a particular law applies to every user:
- India: Ministry of Electronics and Information Technology — DPDP Act and Rules
- European Union: official GDPR text on EUR-Lex
- United Kingdom: Information Commissioner’s Office
- California: California Privacy Protection Agency
17. Changes to this policy
We may update this policy when SiteFueler’s products, providers or legal obligations change. The page will show the new date and version. For a material change, we will provide additional notice when appropriate and request fresh consent where the change cannot lawfully rely on the original permission.