Sitora Privacy Policy

Information you provide: When you submit a contact form, enquiry form, or message us on WhatsApp or email, we may collect your name, institution name, phone number, email address and any details you choose to share about your website requirements.

Information we collect automatically: Our website may collect basic analytics data via privacy-friendly tools: approximate geographic region (country/city, not a precise GPS), pages visited, referrer domain, device type and browser. This helps us improve the site; we do not sell it to any third party.

Client data in the service: When you become a Sitora client, we also store the content, media, photos, and contact form submissions on your managed website, on your behalf, as part of providing the service to you and your institution.

We use personal information to: (a) respond to your enquiry and build your free preview website; (b) deliver the managed service if you become a client; (c) operate, secure and improve our platform; (d) send rare service or transactional updates (for example, billing or a preview-ready notification); and (e) comply with lawful requests by courts or regulators.

We do not send marketing email newsletters without explicit opt-in consent.

We do not sell your personal information. We only share it with: (a) sub-processors that help us run the service (hosting providers, email delivery, payment gateways) — each of which is contractually required to protect your data and only use it on our behalf; (b) with your explicit consent; or (c) if required by law.

You have the right to request: access to personal data we hold about you; correction of inaccurate data; deletion (subject to legal retention obligations); export/portability; and to withdraw any consent you previously gave. To exercise these rights, email support@sitora.in with "Privacy request" in the subject line. We respond within 30 calendar days.

Sitora uses only essential, strictly-necessary cookies required for form submission, security tokens and session persistence. We do not set third-party advertising tracking cookies on the marketing website. If our clients add third-party widgets (such as Google Analytics or chat widgets) to their managed websites, those are their responsibility and are covered by their own privacy notice to parents/students.

Enquiries: we keep your enquiry data for 18 months after our last meaningful conversation, then delete it. Clients: we retain service data for the duration of the engagement, plus a further 12 months of backups, after which it is deleted or irreversibly anonymised unless we are legally required to keep it longer.

Security: client websites are served over HTTPS with HSTS, hosted on modern edge platforms, backed up daily, and access is restricted to named Sitora staff on a need-to-know basis.

Questions about this policy? Email support@sitora.in and we will respond promptly.